Why my servers run unattended-upgrades

Security updates on their own, everything else by hand.