One good test is if they have a decent track record on pushing CVE fixes. Apple tends to hold theirs to about once a quarter unless something is in very common

One good test is if they have a decent track record on pushing CVE fixes. Apple tends to hold theirs to about once a quarter unless something is in very common use. They intentionally hold them back so that people don't have to click update too often.