So what's the best practice today? Install patches immediately avoiding an unusable device because of hacking? Or wait a week avoiding an intentionally unusa

So what's the best practice today? Install patches immediately avoiding an unusable device because of hacking? Or wait a week avoiding an intentionally unusable device because of yet again a flaky patch.