[bakugo]

> I no longer feel guilty about having my system "at risk".

The risk of not updating your desktop OS every week is vastly overstated, and I believe this is at least in part due to fear mongering by companies like Microsoft who use said fear as a tool to keep people on the latest version with the latest tracking and ads.

[rkagerer]

I've encountered a lot more grief from ill-managed updates - and abuse of their delivery mechanism as a perverse means to shove unwanted software down my throat - than from the impact of any security incidents arising out of missing, delaying or contravening one.

The first issue is you don't meaningfully control the timing (ie. defer until you have time to deal with any fallout, which may be >30 days), and that you can't manage your risk by reviewing what's in them and selectively picking the ones you want (ie. true security fixes with limited surface area to bork things).

Once upon a time both those things were easy (eg. meaningful descriptions) and under your control.