That’s empirically false

It’s an idea that can be checked, empirically, and it has been.

There are studies of patch releases that show patch releases introduce new bugs _only_ 15-25% of the time.

Which is not a small failure rate, sure, but that still means that a priori you are much more likely to become less vulnerable by blindly installing patches than by blindly not installing patches.