Thank you.

Personally speaking I strive to keep everything up-to-date, but it's truly dependent on the device manufacturer(s).

For safety and security, I enable the Guest WiFi for my access point and connect anything and everything IoT related. The *only* devices that connect to the regular access point is my laptop, cellphone, tablet and printer. None of these devices have a need to communicate with the devices connected to the Guest access point and none of the IoT devices connected to the Guest access point have a need to connect with my laptop, phone, tablet and printer.