Automatic upgrades handle the security patches. Everything else maybe once a month. My big services like Nextcloud auto update as well.