@MastodonEngineering Other: from my distribution, because it's how I get security fixes of all my packages, except for a few applications I have to install manually (mostly Mastodon).
They can be automatically applied ("unattended upgrades"), and I get emails from both my monitoring and my distribution's security mailing list.