When do critical security updates hit PureOS?

Why looking for Firefox in Gnu system when Debian is there?