If you don’t update, you will be subject to an exploit, and you and your devices will then possibly be unwitting members of (possibly multiple) botnets.

Not updating for X days just increases the risk from only zero-day exploits to the risks of X-or-less-days exploits.