what about security update? They've disappeared for years

Maybe updates you pay to get from RH have, but I never used those anyway. Keep track of what software is on your machines and patch them when a security bug is found. Really it isn't that hard.