Maybe for a server - regularly update the package list and compile a list of packages needed to be upgraded. Then send the list to an admin and let them do the update, so that it isn’t unattended.