Except they invent their own shit all the time also. Sometimes to the detriment of existing products.

Linux Mint is also "Ubuntu without Security". That's right -- Linux Mint does not install Ubuntu's security updates, nor supply their own.

Stated another way: 100% of Linux Mint machines in the world are either:

(a) already pwned

or

(b) vulnerable to multiple CVEs and will be pwned