Debian testing doesn’t get security updates. I’d rather run Debian sid (unstable). But tbh I don’t run Debian myself.

https://wiki.debian.org/DebianTesting

It is a good idea to install security updates from unstable since they take extra time to reach testing and the security team only releases updates to unstable