That depends on whether the OS or package manager does a better job of providing security updates, or the application does.

Historically, browsers -- because of their enormous potential risk (easy to exploit) -- have done a better job of providing security updates quickly than have other tools.