Maybe it looks more 'frequent' but when it does so it's in a much, much more limited scope each time. It's more like small, discrete steps vs a whole batch at once.
> you have the option of subscribing to just the security patches for your version of Debian -- an option that Arch Linux just does not offer at all.
That's because Arch subscribes to the opinion that upstream knows best, and puts emphasis on as much vanilla as possible (which contributes to its overall simplicity, leanness and elegance). Hence security update means version bump from upstream. Contrast with Debian which actively back ports security patches to the pinned version in each release.
> E.g., the upgrade to OS X 10.7.3 changed the behavior of sleep mode such that simply bumping the mouse wakes the system, which eliminates most of the value I used to get from putting the system to sleep, so now I have to ask on some forum for a way to revert to the OS X 10.7.2 behavior of waking only on key press or mouse button click.
Ironically (although I did not notice that particular behavior myself) this would restore the pre-Lion behavior.