The problem is that it’s not obvious when you’re behind on security patches. You can only fix what you can see. And without knowledge in security, you can’t see insecure / unpatched software.

That said, maybe something like what Chrome does or what windows does would work ok. Pick a time / heuristic and install security updates automatically out of the box.