No. At least not for security updates. There is syspatch for the base system and "pkg_add -u" now also also pulls from a package collection called "packages-sta

No. At least not for security updates. There is syspatch for the base system and "pkg_add -u" now also also pulls from a package collection called "packages-stable". The regular 6 month base system updates have been automated as well with "sysupgrade". Doesn't work for whole disk encryption if you have required networking firmware that can't be distributed (I'm looking at you Intel), For that particular case you have to copy the new ram disk kernel (bsd.rd) to the root of the disk. Regular updates are super easy now.