Security announcement mailing list?

[jkitt]

Shouldn't a security focused distro make security announcement in a more direct and urgent way? I was surprised to find that Qubes only had a 'users' and 'development' mailing list.