The ones they don’t back port are usually dumb stuff like “if an attacker has root and has you at gunpoint, a flaw in wallpaperd may allow them to change your desktop background”