They're the best way to stay secured and receive new features.
The issue with them is lack of testing before deploying them.
You can just get the security patches for Mojave. You are trying to make it sound like of you are on previous version there are no security patches. Factually untrue.
I think proprietary software and staying secure are contradictory ideas.