To be honest, with how poor quality some software has gotten, I refuse to update it, security issues or no. Most products aren't that bad, thankfully, but there does reach a point where the theoretical risk of a security vulnerability is outweighed by the immediate issue of "this crap doesn't work any more".