Yes, but you don’t get access to the update repositories which is what you want to keep the system secure.

I don’t think Solaris gets much attention from either the blue or red side these days. Patched or not, I would keep a Solaris machine segmented off with my other retro crap and not use it for anything public-facing where it might be exposed to attack.