Holding udev seems to work fine though, I've been doing it since the TKL Lucid beta.

And AFAIK the udev updates are not security related so it shouldn't cause any issues by holding it back.