IMO, the only good way is "if it works, don't fix it", which means, no updates. People are seriously overhyping updates.
I stopped updating all the stuff - OSes, smart locks, android apps, TVs, BP monitors - I honestly had multiple update problems on ALL mentioned devices, multiple times. I only update the thing when I have an actual problem and there is changelog stating that the bug is fixed, or when I want a new feature. You can handle security in other ways in almost all the cases.
I think this IT update burden has gotten out of hand - I don't recall any other domain is like that - my car, my house, my bicycle, my glasses DO NOT UPDATE and its glorious - apart from physical damage, they work the same as yesterday.
A line item on my agenda today is actually helping a team figure out why when they do a release upgrade on their pet Ubuntu VM practically everything they care about on the box breaks and helping them plan out strategies to un-pet these workloads.
I've had a good share of Windows updates making a mess of things, don't get me wrong. But I've had plenty of bad updates in Linux over the years.