Security Vulnerabilities not addressed in a timely manor OR Upgrade Instructions broken?

Following the upgrade instructions does not result in Drupal core being updated?

From:
https://drupalcommerce.org/commerce-kickstart-2/install

Upgrade Path:
$ drush dl commerce_kickstart
$ drush updatedb -y

Results in Drupal Core 7.41, not 7.43!

/admin/reports/updates/update
All of your projects are up to date.

Name Installed version Recommended version
Drupal core (Unsupported) 7.41 7.43 (Release notes)

So....

Are the Docs broken?
Or does Commerce Kickstart not apply core security updates for months afterwards?

Notes:

https://www.drupal.org/node/3060/release?api_version[]=103
drupal 7.43
Posted by David_Rothstein on February 24, 2016 at 7:33pm
Release notes
Maintenance and security release of the Drupal 7 series.
This release fixes security vulnerabilities. Sites are urged to upgrade immediately

https://www.drupal.org/node/1079066/release
API version
commerce_kickstart 7.x-2.36
Posted by mglaman on April 20, 2016 at 1:05pm
API version
commerce_kickstart 7.x-2.36
Posted by mglaman on April 20, 2016 at 1:05pm
commerce_kickstart 7.x-1.42
Posted by rszrama on April 7, 2016 at 2:05pm
commerce_kickstart 7.x-2.34
Posted by mglaman on February 25, 2016 at 9:37am
commerce_kickstart 7.x-1.41
Posted by rszrama on February 25, 2016 at 9:37am
Release notes
Update to Drupal 7.43 and Views 3.13.

https://drupalcommerce.org/commerce-kickstart-2/install

inetd@srv02 [~/public_html/d7pat]# drush dl commerce_kickstart
Install location profiles/commerce_kickstart already exists. Do you want to overwrite it? (y/n): y
Project commerce_kickstart (7.x-2.36) downloaded to profiles/commerce_kickstart. [success]
Project commerce_kickstart contains: [success]
- 1 profile: commerce_kickstart
- 9 themes: omega, starterkit_omega_xhtml, starterkit_omega_html5, starterkit_alpha_xhtml, alpha, shiny, omega_kickstart,
commerce_kickstart_theme, commerce_kickstart_admin
- 245 modules: commerce_kickstart_migrate, commerce_kickstart_user, commerce_kickstart_reset, commerce_kickstart_order,
commerce_kickstart_inline_help, commerce_kickstart_help, commerce_kickstart_social, commerce_kickstart_dfp,
commerce_kickstart_slideshow, toolbar_megamenu, commerce_kickstart_product, commerce_kickstart_blog, commerce_kickstart_block,
commerce_kickstart_search, commerce_kickstart_menus, commerce_kickstart_comment, commerce_kickstart_lite_product,
commerce_kickstart_product_ui, commerce_kickstart_taxonomy, commerce_kickstart_merchandising, commerce_migrate_example,
commerce_migrate, i18n_string, i18n_node, i18n_translation, i18n_block, i18n_path, i18n_user, i18n_taxonomy, i18n_menu, i18n_contact,
i18n_select, i18n_variable, i18n_field, i18n_sync, i18n_forum, i18n_redirect, i18n, special_menu_items, colorbox, search_api_sorts,
message_notify_example, message_notify, commerce_nosto_tagging, http_client_oauth, http_client, distro_update, rules_i18n,
rules_scheduler, rules_admin, rules, image_delta_formatter, commerce_message, commerce_discount_date, commerce_discount_usage,
commerce_discount, connector_action_default_register_form, connector, commerce_shipping_example, commerce_shipping,
commerce_shipping_ui, commerce_physical, entityreference_behavior_example, entityreference, kameleoon, commerce_authnet, mailsystem,
commerce_add_to_cart_confirmation, taxonomy_menu, pathauto, remote_stream_wrapper, views_megarow, features_override, message_example,
message_og_example, message, token, libraries, chosen, oauth2_common, oauthconnector, commerce_fancy_attributes, help_example,
advanced_help, commerce_paymill, commerce_hosted_pci, mailup_subscribe, mailup, actions_permissions, views_bulk_operations,
commerce_features, admin_views, search_api_db, inline_conditions, commerce_flat_rate, lingotek, commerce_kiala_track,
commerce_kiala_ps, commerce_kiala, date_all_day, date_repeat_field, date_popup, date_repeat, date_tools, date_migrate_example,
date_migrate, date_views, date_api, date_context, date, search_api_facetapi, search_api_views, search_api, commerce_moneybookers,
commerce_moneybookers_quickcheckout, commerce_addressbook, features, commerce_backoffice_content, commerce_backoffice,
commerce_backoffice_order, commerce_backoffice_product, mimemail_compress, mimemail_example, mimemail_action, mimemail, eva,
crumbs_example, crumbs, fences, field_extractor, ctools_access_ruleset, ctools_ajax_sample, term_depth, ctools_plugin_example,
views_content, ctools_custom_content, stylizer, page_manager, bulk_export, ctools, favorite_services, polish_services,
german_services, forward_services, farsi_services, dutch_services, spanish_services, basque_services, italian_services,
swedish_services, general_services, hungarian_services, russian_services, widget_services, print_services, service_links_displays,
service_links_sprites, service_links, commerce_amex, yottaa, mailjet_trigger_examples, mailjet_campaign, mailjet_event, mailjet_stats,
mailjet_list, mailjet, commerce_search_api, search_api_ranges, commerce_yotpo, commerce_checkout_redirect,
commerce_firstdata_gge4_hpp, commerce_firstdata_gge4_ws, commerce_firstdata_gge4, oauth_common_providerui, oauth_common,
menu_attributes, link, commerce_cba, variable_admin, variable_views, variable_realm, variable_store, variable_example, variable,
physical, entity_token, entity, views, views_ui, module_filter, commerce_paypal_wpp, commerce_payflow, commerce_paypal_ec,
commerce_paypal_wps, commerce_paypal, commerce_autosku, countries_example, countries_i18n, countries_configuration, countries,
commerce_exactor_avs, commerce_exactor_euc, commerce_exactor_calc, commerce_exactor, inline_entity_form, strongarm, title,
addressfield_example, addressfield, commerce_payleap, cloud_zoom, commerce_checkout_progress, migrate_extras_pathauto,
migrate_extras_profile2, migrate_extras_media, migrate_extras, commerce_extra_price_formatters, commerce_product_ui, commerce_product,
commerce_tax, commerce_tax_ui, commerce_cart, commerce_payment_example, commerce_payment_ui, commerce_payment, commerce_line_item,
commerce_line_item_ui, commerce_customer, commerce_customer_ui, commerce_product_pricing_ui, commerce_product_pricing,
commerce_checkout, commerce_price, commerce_order_ui, commerce_order, commerce_product_reference, commerce_ui, commerce, migrate_ui,
migrate_example_oracle, migrate_example, migrate_example_baseball, migrate, current_search, facetapi

inetd@srv02 [~/public_html/d7pat]# drush updatedb -y
Commerce_payment 7103 Disable the payment checkout pane on the review form to preserve prior behavior.
Search_api_facetapi 7101 Set up date formats.
Do you wish to run all pending updates? (y/n): y
Performed update: search_api_facetapi_update_7101 [ok]
Payment checkout pane disabled on the review form; enable it if desired in the Payment checkout pane settings form. [ok]
Performed update: commerce_payment_update_7103 [ok]
'all' cache was cleared. [success]
Finished performing updates. [ok]

inetd@srv02 [~/public_html/d7pat]# drush status
Drupal version : 7.41
Site URI : http://default
Database driver : mysql
Database username : inetd_cks001
Database name : inetd_cks001
Database : Connected
Drupal bootstrap : Successful
Drupal user : Anonymous
Default theme : commerce_kickstart_theme
Administration theme : commerce_kickstart_admin
PHP executable : /usr/bin/php-cli
PHP configuration : /usr/local/lib/php.ini
PHP OS : Linux
Drush version : 6.6.0
Drush configuration :
Drush alias files :
Drupal root : /home/inetd/public_html/d7pat
Site path : sites/default
File directory path : sites/default/files
Temporary file directory path : /tmp