I agree with this point completely and have been maintaining at least a few linux servers for many years now. However, I never feel completely comfortable about it because it is not my primary responsibility and I know the target is always moving. If you have any good resources to recommend for current best practices I'm sure they would be useful for me as well as anyone deploying this kind of tool.