macOs management tools for enterprises like Jamf allow you to explicitly set deferral for updates for 30 days to avoid situations like this. I may actually set this for my company since we try and patch within two weeks of a general security patch release.