Just checking with other sas I thought something had changed. It's been a while since I had to use the service to move patches to an isolated network. I actually wrote a whitepaper on this when I did this before.
It still looks like the time range doesn't really look at the "releaseDate" field in the update_metadata.xml file. I thought it might be because of dependancies, but so far that has not proven true.