Django 2.2 is now available in [[ https://packages.debian.org/buster-backports/python3-django | `buster-backports` ]].
Properly supporting Django 2.x has been heavily tested recently and this is the default version currently installed in our virtualenvs so I think we can now safely upgrade to Django 2.x in production.