I love patches as part of a cyber security plan – but there is a problem!

If the patch is not effective or worse it breaks something else whilst fixing the vulnerability.

This happened to Microsoft:

Microsoft fixes Windows authentication woes • The Register

But you still have to run those patches and updates as an unpatched system is a target for threat actors. Better to deal with fixing the update issues than dealing with a system that has been hacked or encrypted with ransomware.