I tend to live in the unhappy place where you have too many machines to maintain but not enough resources to support a full test environment. I find #Debian stable and security only updates good enough. YMMV of you run something else.