Update system packages

My Volumio stopped playing (clicking play immediately changes back to stopped state), so I decided to try updating with apt-get update / apt-get upgrade. Then I searched this forum and discovered various posts telling people not to update.

This seems like a security issue. If people aren’t supposed to update volumio, which is based on Debian, it means they’ll have an unpatched system with numerous known vulnerabilities.

Is it really a matter of policy that people do not update / upgrade their Volumio systems? If so, will it be policy for Volumio 2.0?

Thanks to all the developers for all their work on this great project.