My monitoring script alerts me in case there is an update available (with a buffer of 10 days in order to wait for availability in docker). That’s why I’ve removed Watchtower and do not rely on it any more.
I also have the feeling it might be more secure to update manually in order to watch the logs after the nodes restart - there were a couple of surprises with the last releases.