I won't suggest not updating Core because of future vulnerability fixes.
Better to run Knots if you don't want to adopt this policy.