Yes, I’ve set WATCHTOWER_RUN_ONCE and run it manually (letting it download and automatically apply the updates) when I find time. In the rare case something breaks, I can fix it immediately or roll back the broken container by setting the label to the previous version.