The missing automatic updates part is the thing that bothers me more than anything else. Browsers are very popular attack surface. And if you need OS update to fix those issues, many won't install the updates immediately.
> Your Mac automatically installs background updates for the security configuration and data files used by macOS.
Even tho you switched "Install iOS Updates" on?