Interesting. I agree that getting automated security upgrades right is super important. IMO even technical users should not be doing security upgrades manually. They should happen by default and be builetproof. On Ubuntu and I guess Debian, unattended-upgrades is supposed to do this. But over the years I have had terrible problems getting it to run reliably when the internet connection is unreliable, i.e. on a laptop rather than a server. That is revealing. I don't understand why fixing this is not more of a priority. We cannot invite normies onto a platform where security requires babysitting.