I prefer to lock things down e.g. I limit ssh to just my current IP.
The only time I caught out was a upgrade to testing, but obviously using name rather than distro meant I only got updates while that name was in use.
Keef- Sheerness Kent UK - Shell Energy BB via Technicolor TG582N
Previously - NowTV, Plusnet, Sky, EE, New Call Telecom/Fuelbroadband, Virgin/NTL/Bell Cable, Crosswinds, IC24, FreeOnlineNet, X-Stream, Totalise, Freeserve, Force9, TescoNet, AOL, Freenetname, Pipex, E7