[dspillett]

> Apple's release notes show 79 security issues fixed in Sequoia, and only 37 fixed in Sonoma 14.7.

Not an Apple fan myself (don't touch the stuff at all) but my first thought there would be to check if the "missing" fixes are for things broken in the new release that don't need fixing in the prior one.

> still includes vulnerable years-old binaries

Are these stock builds, so definitely have the problems you are concerned about, or could there be security updates backported as Debian do with older versions in their stable release?