Assuming newer is better is not a valid security posture.

Assuming "free of known vulnerabilities" is, however.