I've held back an OS update or two, specifically because I'm worried about performance dropoff on the old chip

But with all of the AI-discovered exploits I think it'll become more important to keep everything up to date

Apple makes security updates available for the last few major OS versions, and even backports really bad ones further back on a case by case basis.