Up to date
That took a bit of work. I'm happy to report all sites are up to date running the latest software releases.
Every once in a while - on average I'd say about once every couple of months - I'll get a notice that some new security exploit has been discovered and that a new version of Drupal or one of the contributed modules I use to run sites is available.
Usually these new releases cover fairly obscure exploits that could never apply to the sites I manage. Just the same I take them all seriously. For one thing I don't think you can be too careful, not when the property you're looking after belongs to someone else. But the real reason I like keeping things up to date is the sense of satisfaction that comes from knowing there is no known way for some culprit to get in.
Note I said no known way. To be sure there are ways in yet undiscovered by the bad guys. For now, at least, we're all up to the moment, safe and secure.