Yes but automatic unattended #security upgrades should be enabled by default. 

Do you know of any #Linux distros which have that out of the box? 

I mean besides Android...

Thanks.