zypper up with non-SUSE repos in Tumbleweed

Can someone tell me if this is a bad idea and why - I want to do regular updates, like security updates to google chrome and things like that, for all my programs and apps that are managed by non-openSUSE repositories. Then do regular zypper dup updates for the whole system only like once a month. That way I minimize my chances of something breaking right before a critical business trip or something like that, but still keep my security up to date. Any thoughts?