How to make debian 12 automatically updates security updates, without having to do anything at all?

My goal is to give a laptop (with Debian) to a person who will only use it to browse the web. And who will not open the terminal to type sudo apt update...etc. I started looking and was told that gnome-software update does the job. But then here is my question: how is the reboot done ? I imagine it is often necessary. Is the need to reboot explicitly signaled to the user?