Sure, if you compile it from source it's more unpleasant work, but normally I guess distributions take 'security' patches very seriously, and last time I had to install/upgrade PHP it was easy as

Installing: > apt-get install php5-xxx

Upgrading: > apt-get upgrade

Now, boohoo, that's so much work those users are forced to do...