Using the same version of everything lets you have a much easier time when a vulnerability is discovered?

How so? That hasn’t been my experience.

Do you monitor CVEs?