Debian still has security fixes, and point releases. unattended-upgrades is the package that automates their install.

I think you can also do unattended release upgrades by using the 'stable' release alias in sources. That will probably result in some stuff breaking since there will be package and configuration churn.