I like your setup. It's important to point out to users that there is no such thing as "safe" in the absolute sense, only degrees of safety.

I think that a combination of what you're already doing and living a few releases behind the latest is about as safe as we should hope for on our personal machines.