I'm under the impression OP is asking about a distro for their laptop or desktop.

My question to you is, why use an old kernel + packages when you could have newish ones with a reasonable degree of trust? Is avoiding the extremely rare bug worth it?

re:PPAs I prefer my machines packages to be downloaded from trusted sources. The distro developer package vetting and accountability adds value.