> It's common for updates to contain a mix of security-fixes and other stuff. Sometimes that "other stuff" breaks things and/or needs vetting for deployed syste

> It's common for updates to contain a mix of security-fixes and other stuff. Sometimes that "other stuff" breaks things and/or needs vetting for deployed systems. So you have no experience with unattended-upgrades. They really don't contain new features, that's not how Debian's model works - they backport security fixes to keep features the same. > Sometimes a forced restart of the system or a program is worse than a delayed update. For example, when giving a presentation, or when firefighting a production issue. Again, you have no clue how Debian/APT updates work. Things don't just get forcefully restarted. > It's absolutely an attractive attack vector. I want time to hear about problems before installing updates. Unpatched software is significantly more so than attacking your distribution. > e) It's my system. Nobody else gets to override my choices for how it runs. Full stop. I refuse to cede my agency in this area of computing. Sure, feel free to do with yours as you please, but don't recommend terrible things to others, especially those not as proficient. It's bad advice for most end-users and sysadmins to get rid of unattended-upgrades especially for the FUD reasons listed above.