Due to someone leaving the company I work for I was handed the "webmaster" duties of a website hosted off-site running on Drupal 8.4.2. When I first logged in to the admin panel I discovered a host of problems, the most important one being the security updates. I first thought it wouldn't be much of a problem, as the hosting company has the handy interface to install and update/upgrade a number of web applications. But it turns out the that person before me installed Drupal manually (I have no idea why) so I'm wary of doing the "one click install" of Drupal 8.6.13. Furthermore, I don't know enough about Drupal to know if it would be a bad idea to update from 8.4.2 directly to 8.6.13. Would it be a better idea to first update to 8.5.14 and then to 8.6.13?
I've read through a lot of the release notes (8.5.0, 8.5.14, 8.6.0, 8.6.13, & a few others in that range) so I'm aware of the need to upgrade to PHP 7.3. I'm also very comfortable with the command line (it's running on Linux) and I've read (and re-read) the Drupal docs for updating via the command line.
I contacted the hosting provider with this same question but their "yeah, it'll be fine" answer to using their "one-click installer" wasn't very reassuring, so I thought I'd pose the question here before I take the plunge. Thanks for any words of advice or warning.