This is part of the maintenance. The workflow here would differ depending on numerous factors. An automated update sounds like a bad idea.

All I was saying is that setting debian up for immutability is more straightforward. How you maintain the os from there should already be known to someone opting into it.