IMO, the only good way is "if it works, don't fix it", which means, no updates. People are seriously overhyping updates.
I stopped updating all the stuff - OSes, smart locks, android apps, TVs, BP monitors - I honestly had multiple update problems on ALL mentioned devices, multiple times. I only update the thing when I have an actual problem and there is changelog stating that the bug is fixed, or when I want a new feature. You can handle security in other ways in almost all the cases.
I think this IT update burden has gotten out of hand - I don't recall any other domain is like that - my car, my house, my bicycle, my glasses DO NOT UPDATE and its glorious - apart from physical damage, they work the same as yesterday.
i get it for private/home stuff (even then it would make me uncomfortable, but i see the appeal).