I know some do security updates
In the past automatic updates were reserved to advanced users. It was assumed that if somebody was experienced enough to set a cron job, they would be experienced enough to parse APT logs and work around regressions. Thanks to Timeshift, which makes it easy for anyone to work around regressions by restoring snapshots, automatic updates can now be enabled easily, in the preferences.