When do critical security updates hit PureOS?

[FranklyFlawless]

@purirocks

How long do those typically take to hit PureOS?

I do not know.

@purirocks

Do you consider it too risky to browse the internet with a vulnerability like this?

No: I do not use Chromium-based browsers.

@purirocks

Why no Firefox in the package repo?

I suspect it has to do with Debian using Firefox ESR upstream, and I largely assume that was chosen for easier package maintenance, among other reasons.