Seeing as there have been more and more exploits recently with shellshock etc. Have the opinions of people changed in regards to having automatic updates on production servers?

And what would the best way to run these be? Just chucking in a crontab with:
 yum -y update

Or using yum-cron or an alternative?

Thanks!