bouledeneigeofff It doesn't matter. They took ~3 weeks to update from 102 to 103, including important security updates, resulting in much longer exposure to n-days. That's what matters. PrivacyGuides removed Bromite for that very reason and because it also happened in the past multiple times.
And minor updates aren't necessarily security updates. When there are security updates, Vanadium will be updated as fast as possible. The current difference is minor, and Vanadium is closer to upstream most of the time.
Some of the Bromite patchset, including the JIT patches, was initially made for Vanadium.