[chaps]

Friend, considering the supply chain attacks going on these days, automatically updating everything, immediately, probably isn't the perfect move either.

[bluGill]

You need to automatically update from a trusted source. That source better audit and update constantly. Which is hard.

[LtWorf]

Stable distributions have security teams.

[askl]

Ignoring the real benefits of security updates to prevent the unlikely event of supply chain attacks sounds like a weird tradeoff.

[chaps]

A weird tradeoff but an increasingly important tradeoff to keep in mind nonetheless. Like I said, updating immediately isn't a perfect answer. But neither is waiting. I hope you're having this discussion, at least.