Mailing the story:
Enable automatic security update in Debian/Ubuntu
The thought that a server update itself (and maybe even execute a reboot) is not actually something that makes me feel so confident, but it is certainly better than not applying patches to serious security bugs that could expose services to large risks.