They are not absolutely wrong. Old macOS versions do get security updates sometimes. Almost all the time when something really critical has bern found, but the most current macOS is receiving much more security updates. And i dont believe that these more security bugs are only in the newest version. Maybe they are hard to fix in old versions because they can‘t be backported?