Skip a couple framework versions and indeed entire frameworks. Maybe go a couple years before you "upgrade" to something else. It is entirely possible you could go as much as 5 or 10 years on something. You'll still have to evaluate and potentially mitigate some CVE's. But that could actually be less work and less aggravating.

I would propose that if you want to change frameworks, actually complete the migration from one technology to the other.

My problem is having all of them existing at once.