If updates are not applied right away, is my site at risk?

No. Security updates are the exception to the waiting period.

Any update that addresses a security vulnerability is prioritized and applied as soon as it’s available, since protecting your site comes first.