That’s a very good fear to have, and quite frankly, refreshing to hear.
Lots of people are very much of the mindset of “set and forget”, which can work in certain setups, but not always. A quick example – setting up a server, installing the latest operating system updates, going into production and then never (or very rarely) installing updates again. The Linux kernel needs to be kept up-to-date, as do many other packages, such as PHP, MySQL, etc – all of which receive regular security updates. Some control panels (i.e. cPanel) will handle updates automatically, excluding kernel updates which will need a reboot unless using something like TuxCare.
If you want to focus your time on…