So Ubuntu has this model where they pretty much freeze package versions for an Ubuntu release after release, and then they only backport security updates from upstream. There's nothing new here, most distros do it this way. The idea is that this way they can polish the gazillions of package versions
I just realized that I’m getting advertisement for Ubuntu Pro where it said it will give me more security patches when I use apt update. I’m using PopOs. Which really irritated me.