Of course they do. I suspect this is Verizon's way of dissuading customers to go with BB. Delay even SECURITY UPDATES for what is a vulnerable OS for a month or two or four. Hopefully, the reasons for the security updates are not published so that hackers can take advantage of the Verizon BB's!!!!
Keep in mind, you sometimes have to work to get affected. Like the one that causes the attacker to get full access, you have to disable several protections, ignore several warnings for it to maybe take effect.