Auto updates via cronjob - is this safe?

Personally, I do the exact same thing with my sites, but I use the two-container install in case the bootstrap fails.

Only if the bootstrap completes successfully does the old container stop and the new one start.

So far I have had no problems