Then we disagree. Think about it, you're patching the OS so what you now have is an untested configuration, and you've replaced a working system to get there, on the theory that you might be preventing an unknown bug in the future.
In one instance the vendor even explicitly recommends disabling OS updates until they have tested them.
I think you're making a good case against an Internet enabled pacemaker ;-)