debian supports something like this, if you remove the jessie-updates line and only have the release source (which is never changed) and the security source in

debian supports something like this, if you remove the jessie-updates line and only have the release source (which is never changed) and the security source in /etc/apt/sources.list I'm not sure if this is recommended, I could imagine that some security fixes might be based on updated packages from jessie-updates. You might also run into fixed bugs by ignoring stability fixes, personally I don't think it's worth it.