This is exactly the problem: It's too much hassle for me to track and apply and recompile the packages whenever an exploit is found. I want this stuff to happen (semi- or fully) automatically (optionally, of course). Debian's apt-get provides that, most other Linux distros provide it as well by now.