I think they release a minor version once per quarter. Not sure how vital or hard it is to update everything, but it's way more secure than WordPress. Another

I think they release a minor version once per quarter. Not sure how vital or hard it is to update everything, but it's way more secure than WordPress. Another option is to take advantage of a service to host your static files for you. For example, netlify can be pointed at a git repo with static files, or you can drag and drop a folder of files to deploy / update your site. Because your files aren't really tied to the hosting platform, if you decide to switch solutions it's really as simple as changing your dns records.