That's part of a risk calculation. Is the risk of an outage from upgrading the OS (officially or not) higher than the risk of leaving the machine unpatched?

And that calculation is affected by so many things, including the physical security and if it's internet-connected.