What is your update policy? Are you on auto update, or do you manually go over stuff, do you pick a day to just flush it all though, or are you just on an old version?
Share why and how you run your updates? I would like to hear how you all manage them
For apps and integrations I run then when I would have some time to do a rollback, mostly this is quite quickly. For home assistant updates I always read the changelog and estimate if there could be complications, if so I wait for an x.1 patch to be available before taking the plunge.
The HACS updates I always leave for a few days and read though carefully what has changed, quite often even way deeper into the code.
For Esphome I run a full compile about every year, and I updated then when I change something in the YAML. These run on a Vlan and not exposed, so they are not a big risk I think to be outdated.