You can only get security upgrades for packages that you have installed. You may not have others installed at all. Check non-upgraded packages' status.
You are absolutely right. That was just too obvious for me. Thanks! Ben Pharr