You can opt for security only automatic updates which a lot of server admins do. However, if you are running something in production, you don't want to risk any breakage due to an automatic update. This is independent of the operating system.
This. Security-only updates are the only ones I allow automatically. Broader updates are too risky to allow to happen without supervision. I think this is independent of the operating system being used.
