Wouldn't you test before upgrading packages in production? And usually you'd want to schedule any upgrades so that the next day or two has coverage from someone who can deal with any issues that arise.
Should we do better? Absolutely! Will this burn people if vendors don’t take care? Also absolutely!