The biggest thing we've got wrong with the modern approach to update is, in my opinion, combining security updates with feature updates. They should be separate. You always want security updates. You may not want feature updates.