I'm activated now and am ready to patch.
I think that I need to patch a couple of servers now.

Do I just do the following command?:

rug pin --entire-channel oes

Is this safe? Any issues?

This server is not part of a cluster but does contain R/W replicas.

Any other command to just get critical patches? Or is best to install all

Any prep work I need to do prior to patching?

Being more cautious than just jumping in and making a mistake.....