There is no difference AFAIK, there’s only an additional subscription possibility to avoid such things and still have autoupdates. Last time there was a samba bug so we decided to implement a warning on new releases.
Another problem is EPEL and other additional repos, they will still get updates and there seems to be no possibility to freeze them except of hosting all packages (this is done in the stable repos AFAIK).
So what else can we do to have stable installations during the phase of a new upstream release without subscription?
I don’t know if it’s possible to bake an actual ISO, AFAIK as I know the minimal centos ISO are not updated between the releases.