The current GNOME update workflow, however, is the most reliable we
have, because it downloads the updates then boots to a minimal systemd
target with as few things running as possible to install the updates,
then boots back to the normal system. This is far, far safer than
running the update inside a desktop.