But the VM needs reboots too, kernel upgrades for example.

And if you upgrade libraries, especially for security issues, you need to restart apps dependent upon them, needrestart in Debian helps greatly with this.

So a VM doesn't really help solve this.