Everything you need is already included after a sysupgrade (and potentially opkg install). Upgrading packages is never necessary except for the rare case where a package needs to be upgraded due to a bug/security flaw or new feature addition that is actually needed.
It is very rare that the packages are found to have vulnerabilities that are material within the context of OpenWrt, but if/when those do come up, the information and remediation instructions are included in the announcements forum section.
The fix is simple as long as you are prepared... so yes, for science!
Anyitme!
If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.
Thanks! 