People don't want to update their rom every day or every week and if these manufactures were so great they'd make sure the software they release isn't full of bugs requiring weekly updates. That is why I said I rather have few but high quality updates then frequent buggy updates.
But the weekly updates is not required. It's optional.
While if you use Samsung or Sony phone, you will need a month at minimum to get the bug fix update.
I say Samsung or Sony because of that's the brands I have experienced that care to give bugfix albeit slow. Dunno about Motorola or HTC update speed.
On the other hand, LG is completely bonkers. They doesn't care with bugfix. Only feature update or major update.
What phone do you use? Have you patched it's stage fright vulnerability? It can give complete control of phone to 3rd party.
Or any other ridiculously dangerous bugs.
Btw while most apps on play store are safe, researchers found that there are popular apps that was a Trojan for exploits.
Sorry can't give any direct link. All available on arstechnica.com though.
If you like most people that only use play store and only install trusted apps (those with special icon in their name), and did not use MMS, you probably are safe and don't need to update.
Like most xiaomi and Sony users. You don't need to update despite they diligently give bug fixes.
Those are optional.
But if you are concerned with your security. Why not update? Xiaomi give them weekly, Sony usually fix in a month.