It's only going to be used for local storage, so no Internet connectivity required. I'll probably use WSUS Offline to update it with whatever updates are available, for maximum stability. Surprisingly, I believe Server 2008 R2 did get an update for the recent PrintNightmare vulnerability.
Be warned....the Tuesday patch for PrinterNightmare that MS issued for W10 didn't work.
Microsoft’s emergency patch fails to fix critical “PrintNightmare” vulnerability
Game-over code-execution attacks are still possible even after fix is installed.
arstechnica.com
I doubt the patch for 2008 did either, but YMMV.