From what I have seen (ycombinator??) not necessarily a 'better' idea. My Arch machines are patched, my Debian not so much.