I'm a Wordpress freelancer and a while ago i started creating my own themes for clients, either forking from a default theme (like Twenty Twenty-Five) or occasionally creating something completely blank.

How do I ensure these are secure? If Twenty Twenty-Five gets updated, obviously my themes are not being updated. How do I keep on top of what needs updating?