Automatic updates are there with the right distro. Which highlights the need to look around for the right distro for the use case.
Example being Opensuse Aeon - automatic updates - doesn’t even tell you it’s happening, just pops up “your system was updated” out of nowhere
Automatic rollback - if an update broke something you would never know, at boot the system will pick the previous snapshot with no user intervention
As far as the user is concerned you just have a working system; that it is the entire goal of that distro
I was confused, but I think they might be asking why Veracrypt isn’t available as a flatpak