I have a few Raspberry's floating around the house doing odds and ends, and balena seems like a nice option for reducing their management needs. But I really want them to be able to get the latest security/etc updates without me having to manually update each of them from time to time.
The main consideration for a feature like this is that sometimes containers have dependencies to interfaces exposed by the operating system which are not always stable. This is especially true for IoT usecases because containers will typically interface with some device connected to the system.
Tangential to this, we're working on an extended support release schedule (a la firefox) for balenaOS. I could see us building an automated OS update mechanism on top of that. We'll definitely think about it, thanks a lot for your feedback :)
Btw balena is a great service, good job!