Debian violating its own Social Contract?

IntnsRed write: “An interesting bug report was filed today by Florian Weimer against Debian GNU/Linux. Florian claims that the Debian practice of holding back security fixes until other GNU/Linux distributions get them is wrong, adding, “I do think that it is conflicting with the third item of the Social Contract: The promise, “We Won’t Hide Problems”, is not held.””