Debian stable? It's probably about as safe as you can get for that. Problems are rare. Bookworm is supposed to get security updates until 2028. If they keep on being as stable as they have been in my experience the only one he's likely to notice is Firefox updating to a new major version once a year.