it's only needed to stay secure if you are already insecure to begin with, running software that you shouldn't be trusting and that makes you vulnerable to boot. the "required" updates won't fix the underlying source of your insecurity, they will only provide a channel for enshittification of your computing device
https://www.fsfla.org/~lxoliva/#specmelt
see also my upcoming talk at LibrePlanet
https://libreplanet.org/2024/speakers/#6621