Therefore, I proposed updates controlled through the Enhance panel with individual package security enabled. After testing these packages through Enhance, they can be released for updating. Consider this, Adam.
Plesk have option:
Plesk makes sure that system package updates are installed from the same repository that the packages were initially installed from. Such updates are considered safe. If you disable safe updates, your system packages manager might install updates from any repository in the system.
We recommend that you leave safe updates enabled unless you are an advanced user. Indiscriminate updates of system packages from different repositories can negatively affect the functioning of your server.