I don't know about "people", but I know that the companies and organizations that I've worked for and with for stay reasonably close to the leading edge for security and feature reasons.

And if you have a reasonable testing environment, it's not rocket surgery to figure out how much of a problem a new version might be.