Yep it should only ever install some high priority security issues and such, and actually I suspect it's not actually doing anything complex itself (kicking off processes that perform the downloads + upgrades, but not actually applying them?) so it seems there's something weird going on :-(