Unattended upgrades? iptables? ssh config lockdown?

I used to manage nearly a thousand websites running mostly on PHP and using parallels plesk. I grew to hate plesk. It doesn't respect system services, it overwrites them. It takes ownership of everything and forces you to do everything through plesk... and then fails to support everything you want to do.