The person who says yes is wrong. 2 versions behind would still be able to get security updates so would be perfectly ok for production. 7.4 just went EOL with no security updates. This means 8.0, 8.1, and 8.2 are all receving security updates. 2 behind means you would be on 8.0 and ok.