Volumio Security

Hi guys, I am worried about the level of security on the Volumio Raspberry devices. I can see that alot of updates when I run sudo apt update yet if these are implemented the system breaks.
Now as we do live in a strange world, I think that patching the OS and related applications is of most importance.

I know that we are behind a firewall and all that, yet this is not something that can replace security on the device itsself.

By the way disabling SSH by default is not enough.

Any ideas?