I think it is because it could bring security updates to closed source éléments of your phone. But don’t do this if it brings you to Android 10.
While the phone reboots after the installation of TWRP is done, go directly in recovery mode (be fast
I don’t think so, everything should be up to date enough with your device.
Here is a HOWTO you can use or look at :