FWIW -- businesses have requirements to provide fixes immediately, but they also expect drivers to be backported, we obviously address backporting automatically, and we also have a way to address prioritizing upstream with these rules but also provide a mechanism for dealing with direct deliveries through the additional patches to stable patches: