And may I add: why are they not included in Update 4?

That’s a discussion that has been had several times here on this Slack and in other forums in recent days. The gist of it goes back to the stance of separating security updates from bug-fix updates.

Ah, I hadn't seen those discussions. Thanks for letting me know.