lots of things will autoinstall security updates nowadays.

Debian and unattended upgrades might need a tweak if you want it to actually reboot by itself, but I think the option is there