The issue is that the forks don't have the resources to focus on the security issues as they come up, and as the fork gets further and further away from the main project it becomes harder to merge the changes from the main project.