Ask HN: Does anyone use unattended security upgrades inside Kubernetes-Pods?

The title says it all: Does anyone use, for example, unattended Debian-security upgrades in deployed pods on Kubernetes as opposed to updating the image and swapping out the pod?