Bart Schaefer wrote:
Or is it reliably the case that centosplus gets updated along with the base kernel whenever necessary if the upstream has released a security fix?
The CentOS plus kernel will get updated everytime the upstream kernel is updated, usually within a few days time ( we aim to turnaround within a few days. )