what's my best bet for a set & forget situation?
Deploy WingetUI and set it to automatically update everything as administrator. The nice thing about this solution is it scales to whatever 3rd party apps the user installs in the future.
It's about as close as you'll get to Debian's venerable automatic-upgrades
on Windows.
The FTC tried & failed. They'll most likely fail here too. It's tough for courts to rule against what the FTC sees as unfair competition when even the judges are likely Amazon Prime & Big 3 ecosystem subscribers.