I probably wouldn't have, had there been no package conflicts. As for security risk on the yearly update: all the services are only locally accessible. None a

I probably wouldn't have, had there been no package conflicts. As for security risk on the yearly update: all the services are only locally accessible. None are exposed to anyone but me. I do apply CentOS updates daily, though. My only risk in an attacker on my LAN, and I think I have that locked down well.