I've been using Debian:Stable on servers and occasionally on desktop for many years. I can't say I've ever had a problem due to a bad update.

IIRC there have been a couple, but they've not affected the packages I was using, or I hadn't updated before the issues were spotted and resolved. The last half of that point is important: most Linux distros can be trusted to be left alone for 24 hours without coming back to find they've rebooted themselves, potentially losing work (or if not work, at least context so getting back to work takes longer than it should), without permission. Forcing updates and reboots might be acceptable when they cover a serious remote attack exposure bug, but Windows will reboot itself without permission even for relatively minor updates, and the fact it needs to reboot for so many minor things, where under Linux the updates might just need to restart a daemon or two rather than the whole OS, is irritating. Yes, there are ways to block Windows doing that, but you shouldn't have to fight your OS like that.