No win scenario. We need to install updates because of security vulnerabilities. But we shouldn’t install updates because they might introduce bugs.

Of course, we largely only need to worry about the security vulnerabilities because manufacturers increasingly hook our hardware up to the internet so they can exfiltrate data about us.

To be honest, with how poor quality some software has gotten, I refuse to update it, security issues or no. Most products aren't that bad, thankfully, but there does reach a point where the theoretical risk of a security vulnerability is outweighed by the immediate issue of "this crap doesn't work any more".

Security vulnerabilities get too much credit. It's "think of the children" of the software world. Most updates don't fix any, most vulnerabilities won't get used in the real world against you either, and in many cases the security is for the corporation against the customer instead.