Hi,
I think the better approach is to allow more updates, as Kevin suggested, usually they fix more than they break.
I also think shorter freezes with unfreeze on slip are better than the current approach of accumulated updates on release day.

From my point of view, the best approach is rolling release, if the manpower allows for it, openSUSE and Arch do it well, and for the more conservative people, there is the "Security Updates Only" way of dnf-automatic that Johnny mentioned.

Regards
Mustafa