No security updates?? ... Nope sorry. That's the wrong way. Especially when it comes to network-facing programs (e.g. web browsers, e-mail programs, openssh-server, samba, nfs, ....) Linux wouldn't be what it is today without the many security updates that are made available to the user more or less instantly when a security flaw is detected. Compare this to Windows .... where Microsoft deliberately choses not to fix security holes even after years because they decide it's not important for the users.
Linux distros have demonstrated time and time again that Microsoft's ways are outright wrong. You cannot play games with security and just cross your fingers and hope that nothing bad will happen.
If there is a security hole: Name it, inform the users, and for God's sake: have them update their systems asap.
We don't need a second Windows.
