apt is pretty configurable though. For example I get an automatic email every day notifying me of package upgrades that are available. Only security patches are installed automatically (you can even specify individual packages to be excluded altogether).

I've mainly used mysql and never lost data due to an upgrade (we backup before an upgrade anyway), YMMV of course.