If the security problem is big enough, he might get one. Wasn't it so some time earlier or do I just think it was?
It happened exactly three times, a long time ago. iOS 3 had a post-EOL update to prevent jailbreaking, iOS 6 had two updates to assure normal usage of the device. In the first case it was an expired certificate that prevented users from using FaceTime, in the second one it was a bug in SSL that prevented connections to certain secured websites (which meant that some websites could not be accessed). Although strictly a security issue, it was likely done to make sure that people could still use their phones for browsing. In the case of iOS 6, these updates were only signed for devices that were unsupported by iOS 7.