With unattended-upgrades enabled and nothing open to the internet (I run Tailscale to be able to access it when I’m out of the house) I don’t worry too much about mine.