Maybe I should have added: "or not update at all until...?"
I'm not up-to-date on what the securit repercussions are for not having your iPhone on the latest iOS update. For my main Mac, for instance, I'm still on Mojave (10.14.6) as it runs smoothly and still gets security updates.