@vkc
For Debian and Ubuntu people may also want to look again at unattended-upgrades since that can automatically install security updates

Helpfully you aren't forced to take feature updates at the same time unless you want those too, and the update interval is also configurable.

manpages.ubuntu.com/manpages/n

wiki.debian.org/UnattendedUpgr