If your system is secure, updating it can only make it insecure.

This “logic” overlooks a number of issues.

Firstly, no system is “secure”, only more so or less so given a specific threat model.

Secondly, a system can become less secure without any changes, as exploits are discovered.