they should have included the security patches from the get-go
I dont know how Ubuntu does that stuff, but universe is community supported only. It is required for many normal packages, so yes you could say their service is not good enough but hey, its free Software.
If you dont pay a cent you have like nothing to complain