there are more security holes in SP1 patched than SP2
what he has to do is to test SP2 on just one machine first
see if it works with that hardware/software configuration

if so, then apply to all