You can update most of the security updates without installing SP2. It is the option below the main update screen after the scan for updates that says "Install other updates"

I personally run Win 2003 Server on most of my systems even the laptop other than the HTPC where the DVD player software works better on XP. Win 2003 is rock solid and I have yet seen a crash or blue screen of death.