You could configure the system to perform unattended upgrades if you do not wish to maintain it manually very often. See https://linuxcapable.com/how-to-configure-unattended-upgrades-on-debian-linux/