4.9.24 (Apr 21) is currently latest kernel for Raspberry Pi, and we feel secure even daily posts about secure problems (BCM, crypmine...), yeah we got rpi-update command but really who want to corrupt their SD card?
And maybe 2017ish update to stock oldie OpenGL Mesa driver
