Why is Samba36 not updated to newest versions?

Is there any reason to not update to samba-4.10.6?

Both master and 19.07 seems to use samba 3.6.25, which currently has several unpatched security vulnerabilities:

Wrong. There is also 4.10, look into https://downloads.openwrt.org/snapshots/packages/mips_24kc/packages/

Both master and 19.07...