I have a small hosting company with a few hundred sites hosted on cPanel. All my clients need to use a WordPress plugin from our company for compatibility issues.
So I have the option to make all WordPress installs and plugins automatically update.
I just need to add these two codes in my plugin:
add_filter( 'auto_update_core', '__return_true' );
add_filter( 'auto_update_plugin', '__return_true' );
Doing so would greatly improve the security of the entire hosting.
However, This may cause some inconvenience to my clients. Incompatibilities with themes, websites break for some reason, or simply because they do not like everything updating alone.
Another thing I have to take into consideration is that WordPress itself does security updates alone, including for plugins (and I would have to rely on it).
So, is it better to turn on automatic updates or not?