If you're sure it's unpatched, it's safe to update if you don't care about your fuse count.
Alternatively, make a NAND backup, update using ChoiDujourNX without burning fuses, format, and then (optionally) downgrade if you so choose. Either way, your fuses won't be burnt. This method carries a ban risk, however.
Another option is to make a NAND backup, install AutoRCM, update using the system settings without burning fuses by running Atmosphere during the update process, format, and then (optionally) downgrade if you so choose.