"It seems like on a lot of stacks, keeping the server alive, patched and serving webpages is a part-time job in itself. In my world, that's Windows Update's job."

I imagine the Linux alternative of this would be Debian with unattended-upgrades and a PHP app.