A sadly valid concern! But unfortunately printer drivers aren’t sandboxed away in any OS you’re going to find on a typical home desktop; some of them probably even open up network ports… I seem to remember an old HP driver that did that.
And honestly, maybe I’m paranoid, but I’ve found that these days it’s best to never recommend skipping an update for any reason. Too many people who are looking for justification to not do the scary thing they don’t understand will then cite you as their reason for being infested with malware later on.
