Canonical literally has paid security support. So people DO pay for updates they are not providing. Stop licking them boots