While I'm not an active user, I don't recall seeing much change in say XFCE or in Cinammon for that matter

In this particular regard, options are good to have, depending on how much you value that kind of stability you could even freeze only the DE and let the stuff around it update, which is a lot better than actually being stuck in any insecure OS