You are indeed missing stretch-updates.
stretch-updates
stretch/updates from Debian Security is not the same.
stretch/updates