For security updates it still depends on risk though. A flaw in my browser is extremely high risk and I require it fixed and updated quickly. But a flaw in my

For security updates it still depends on risk though. A flaw in my browser is extremely high risk and I require it fixed and updated quickly. But a flaw in my SSH server that is only accessible from behind a VPN is lower. And the risk is lower still if it's a flaw in a feature which I do not use. I don't see an easy solution of course, it's a hard problem. But I wish that I had more granular control over what and when I update, and was given a clearer way to see the impacts of the update so I could weigh risk.