I’ve had a bunch of clients for whom I’ve done and installation and they have done absolutely nothing for years, not that I recommend it. If you set up automatic security updates and a few times a year do s command line upgrade you’ll likely be fine. I offer a service to do command line rebuilds automatically when they are required.
If you want to be a bit safer you can configure pushing backups to S3, so if something does happen to the server you’ll have a backup.