lots of things will autoinstall security updates nowadays. Debian and unattended upgrades might need a tweak if you want it to actually reboot by itself, but I

lots of things will autoinstall security updates nowadays. Debian and unattended upgrades might need a tweak if you want it to actually reboot by itself, but I think the option is there