I think it depends upon your threat model. If you are considering people scanning the Internet for servers vulnerable to the latest security bug then yes, if yo

I think it depends upon your threat model. If you are considering people scanning the Internet for servers vulnerable to the latest security bug then yes, if you're considering targeted attacks then slower fixes are worse.