Unattended-Upgrades. Most of the time it is better to risk untested faulty upgrades instead of unpatched remote ACEs.