Mine is fully backed up.

what’s my best bet for a set & forget situation?

Deploy WingetUI and set it to automatically update everything as administrator. The nice thing about this solution is it scales to whatever 3rd party apps the user installs in the future.

It’s about as close as you’ll get to Debian’s venerable automatic-upgrades on Windows.

I used to subscribe to this blog. The takes were so bad I’d deliberately share the links the author was railing against.

Yeah I wasn’t referring to those.

Hence why I’m leaving the Debian / Ubuntu based distros

Ubuntu non-LTS packages are pretty up to date.

In many architectures in which certificates are used, a client with a valid certificate is a trusted client, so a certificate falling into the wrong hands is problematic.