Fortune 500 companies use Debian, and mom and pop shops still have to deal with the fact that patches occasionally break critical services.
If you have never in your entire life run `apt-get upgrade` and spent the next four hours wishing you hadn't, then you are quite fortunate. Regardless of the size of your shop, if you're outsourcing patch approval blindly to any distribution, you probably aren't doing anything particularly interesting.