They upstream everything they can: https://puri.sm/posts/end-of-year-librem-5-update/. In the long term it decreases the amount of work for the support. AFAIK PureOS is trying to differ as less as possible from Debian and mainline kernel. It needs to differ due to the new hardware and some privacy/freedom-respecting defaults though.
