No FFmpeg security update is “minor”. Almost each ffmpeg security bug is a code execution one. Almost each and every one of them is hard to backport. Those 10 security updates might represent more work than 100 *really* minor security updates.