Couple of reasons
They’re fully dependent on the original software
They have a lot less eyes reviewing them
Often with 1 or couple of people
They may eventually fizzle out and end development 
It costs money and time not enough to go around  

 Yeah that's my problem with forks. They may not get security updates in a timely manner