My systems do automatic update checks, but require manual approval to install them.
Though I generally install them pretty soon after seeing that the update is available, so there's not much time between the update being discovered and being installed.
For applications it's pretty much immediate but for bigger things like operating systems it can be a little bit