running

sudo apt update && sudo apt upgrade -y

Is the really hard part.

That’s not the hard part to do, it’s the hard part to get other people to do, particularly those who can’t just run the package manager or let in-doze play patch roulette every Tuesday.

Security through obscurity isn’t going to cut it in the future, much less than it already didn’t in the past.

Security through air-gapping is still pretty good.