Yes, but you as a user are in control of when/how you update, you can first update some test server and only then propagate it to other.

But still better have single (hopefully secure) risk point/target that you need to pay attention than have multiple god know when/how updating that you dont even dont know about.