Their main point is that Canonical do in fact charge for security updates (they charge some companies for support), and yet are not providing them.