I like your idea of giving CRSP more recent updates. However have you consider legal risks? If it's not updates, it should be fine, right? I personally used CRSP (+compustat ) with low undergraduate student privilege for backtesting.