Hi Stefan,
Did I get this correctly: for SharePoint 2016, it is recommended to install latest Public Update (currently KB3213544 & KB3213543) ASAP? For SharePoint 2013, it is recommended to install only the latest security updates (currently KB3213559) ASAP, Cumulative Updates only when required?