Upgrading to new version can also introduce new exploits, no amount of tests can find those.

Some of these can be short-lived, existing only on a minor patch and fixed on the next one promptly but you’ll get it if you upgrade constantly on the latest blindly.

There is always risks either way but latest version doesn’t mean the “best” version, mistakes, errors happens, performance degradation, etc.

Personally, I choose to aggressively upgrade and engage with upstreams when I find problems, not to sit around waiting and hoping somebody will notice the bugs and fix them before they affect me :)