I’m sure there are longer solutions as well. This is straight up from the Ubuntu wiki. If you want to configure it differently, e.g. do all updates, not just security, you probably have to change some more vars in the apt config files.