Desktop software has auto-updated for a long time. Is “auto-updating server software” a thing?
This seems ideal. It would provide the security of a managed service at the cost of dedicated hardware.
On my servers I have a cron for fetching updates, but not for installing them. I get an email so I manually install them.