A routine beats an emergency rush.
Patches and maintenance releases follow one another throughout the life of software. Waiting for a major alert to act creates technical debt and increases the difficulty of each intervention.
The right pace depends on the risk.
For a showcase website, a monthly check may be appropriate. For a client portal or a service that collects data, the frequency and testing must be increased. The important thing is to be able to explain the rule being followed.
To learn more. Official WordPress version archives