That works to some extent, but there are packages which don't have a UI from which to check for updates, so you could end up with some services becoming outdated and broken, or just vulnerable.