“As a consequence, we can’t publish a release without open issues. Instead of delaying the release further to fix them, we’ve instead chosen to be transparent about this.”
The release ships with three documented security issues still open, in hdaudio, ipfilter and the packet filter, and the project says so on the announcement page instead of burying it. None are enabled by default in the released kernels and fixes are targeted at 11.1 in two months. Compare that to a commercial vendor shipping the same state of affairs and saying nothing. Naming your open holes at launch is the rare version of this that respects the people running the thing.