You can livepatch your OS without auto-deploying the next major version of iOS. That's what, I dunno, security focused OSes do when a critical vulnerability is discovered.