Depends on the environment, but I can safely say that I allow security updates without reboot in most production environments and have yet to run into problems.

Depends on the environment, but I can safely say that I allow security updates without reboot in most production environments and have yet to run into problems. Rough estimate I'd say it's 50/50 whether I patch manually or allow unattended patches.