So much this. I totally want security fixes, but I only want security fixes. I don't want UI changes, features removed or altered, or anything with my usability upset.
My computing devices are tools I use to do my job and run my life. I don't want those tools changing without my consent.
Unfortunately, even for desktop software, this has shifted today: you can hardly get a security update without a feature upgrade too.
Except in cases like Debian (or Ubuntu LTS main collection, Redhat distribution...) which assumes the burden of backporting security fixes to a stable collection of software.
Debian has exceptions too; for eg all mainstream browsers come with feature upgrades too, even in LTS/stable.
Browsers are some of the worst offenders in terms of pushing pointless feature upgrades. It's ironic because the web is supposed to be this backwards-compatible thing but browsers themselves will add and remove features and change their UI for no reason.
Yes, I remember that discussion at Ubuntu/Debian, where they had to accept those terms in order to keep the name "Firefox" in (remember things like Iceweasel?)