Checking for them is generally a waste of time these days. We also now default to applying security updates on devstacks and we do them in production. We may enable them everywhere in a future release, but that will require more updates.
