Consider Security First
changelog.complete.org
changelog.complete.org
For what it's worth, I've been automatically installing Archlinux updates for a while now. I have monitoring for things that I care about, and every now and again I find out that I need a monitor for something I didn't realize I cared about.
It certainly requires more attention than something like Debian/Ubuntu where they're backporting security fixes, but it also means there's one fewer layer where somebody has to correctly align the stars to patch a vuln.