Very well said… and update strategy is a personal thing… some people want to keep the system always updated to the latest patch, while other people would like more to keep on the safe side and only install more stable updates. Both have advantages and disadvantages, so you have to choose yourself.
I’m on the first group, so I use this blueprint to keep everything always updated, regardless the risk involved on that.
If you are in the other group, this automation suggested by @CentralCommand may be the right direction for you.