I do a little bit of both.
I’m only subscribed to about 10 small communities, where it’s stuff that I love but the communities are small enough that they don’t really reach my all feed.
And the way I browse all is that I’m always blocking communities that really don’t interest me so over time I only see stuff I like.
Security vulnerabilities are usually tagged as CVE and then some number. So the other dude is basically saying enjoy the security vulnerabilities.