I agree with the first. For the second, Synology has an option to apply important updates automatically, where I think that means infrequent security updates,

I agree with the first. For the second, Synology has an option to apply important updates automatically, where I think that means infrequent security updates, not routine DSM version bumps. I interpret the new option to mean something like still installing the updates, but after a number of days have passed, presumably to give you time to cancel it if the news blows up with stories of bricked machines.