> but you're rolling the dice every time you update.

Definitely, they've all become paranoid about updates or installing anything which is not absolutely necessary. They are a version or two of macOS behind, and never update without confirming with the technician.

I shudder at the security implications, but I'm told it has become quite common after the trashcan came out.