1. Restart is ok: automatically apply all security updates as they come out ("dnf-automatic), then restart if required ("needs-restarting -r").
2. Restart is not ok: automatically apply all kernel patches as they come out("kpatch auto")
However its o my going to work on rhel 10 or anything that has very very up to date DNF version.