One of the things which makes one a good system administrator is the ability to evaluate the facts and other people's suggestions, and then decide for onesself what one should do.
A general rule that applies in most cases is as follows: If the machine is a critical server, for which unplanned downtime of a service on the machine can not be tolerated, then you should not use automatic updates. Even the general rule above has exceptions, or can be worked around.
The static list allows you to tailor rules to individual machines while dynamic lists help you stay up-to-date with current threats.
You can use a service to automatically download and install any new updates (for example security updates).
The dnf-automatic RPM package as a DNF component provides a service which is started automatically.
Blank and comment lines are ignored; others should have one or more whitespace-delimited fields as follows: Currently, I am not aware of any bugs in this script.
Rule optimization can slow things down significantly.