They roll out critical security updates immediately. Either through the app, or RSR fixes.

Then they have more or less monthly security updates, and bundle some into minor releases to not force too many updates which require rebooting.