Core supports feature freezing, (enabled by default).

This is a new feature to allow system admins to lock their site at a specific feature version and only receive bug/security fixes.