Hello Danrobi,
In the case of the kernel version, Trisquel is a Point release distro, that
means it releases a versions of the OS and then it just pushes security
updates. Version 8 of Trisquel is based on ubuntu 16.04 LTS (Long Term
Support) which has support to 04/2021. So I agree the kernel is old but that
doesn't mean we don't get security updates. 4.4.0.143 was released this year
if I remember correctly (someone can correct me). In summary, it is secure
because that is the intention of that version, security updates.
In the case of development, you can check the irc channel (I don't have the
link just now) and the development page devel.trisquel.info. I'd agree
development is not the fastest thing of the Trisquel project.
I hope this helps, and I know others would be happy to correct or increase
the information I gave.
