Whether updating on A9LH or sighax/b9s is safe, depends on your CFW and it settings - you must have a kernel write protection patch
Luma/Reinand always have one, in Cakes/Corbenik it's optional, Gateway doesn't have it (and is incompatible with 11.3+)