Distros are backporting security patches into their releases, so no harm done. If you rely on the python.org releases and don't build from source, then yes, that is a bit sad.
Case in point: The Debian security tracker, see their notes section referencing each commit.
The python:3.8 and python:3.9 container images if used to build web services such as Django with GIS extensions may have an RCE until Python.org sources are updated.
Case in point: The Debian security tracker, see their notes section referencing each commit.
https://security-tracker.debian.org/tracker/CVE-2021-3177