Welcome to WMT!
Kit wine vendors claim that no topup is required, but that assumes you bottle on their schedule, which is 4 to 8 weeks from start. That includes fermentation and clearing time. The first few weeks the wine is protected as it's emitting a continuous layer of CO2, and after that a short period with head space doesn't cause significant harm. Numerous members have attested that this is fine.
If you are bulk aging longer, topup with a compatible wine, either the same type or something that complements the wine. Water dilutes your wine, so it's the absolute last resort.
I don't leave headspace for more than a few weeks after degassing. Whether the wine is truly safe or not, when I eliminate the head space, I know it's safe. Having dumped a few carboys in my time, I err on the side of caution.