As discussed with @MoritzMuehlenhoff and @hashar regarding tickets T177920 and T159254, specifically in patch https://gerrit.wikimedia.org/r/#/c/389480/, having unattended upgrades for packages coming from -updates suites is good to have as well.
So, let's create a patch for this.