I'm using arch (rolling distro) as my main OS. I do EVERYTHING on it.
The rolling release schedule is too much for me to manage there.. but for my daily-driven workstation, I find it to be a fantastic OS.
And Testing doesn't get fixes for contrib and non-free:
I checked the security site listed in the Testing area in the Debian FAQ and don't see the recent SSH fix or the recent Linux kernel fix.
I do see them on the Ubuntu site: