Hi Joost!
Thank you for the great recommendation--I confess I didn't know about
the debian-security-support package! It seems like this might be the
one I recommend from now on, because it doesn't require an MTA and
learning how to access local mail, and because I now wonder if
debsecan's output is a bit "too much" for casual use. Also, it would be
nice if it hooked into system upgrades like needrestart does; I worry
that having to manually run it might be like having to manually run
backups, ie: it seems like most people end up not bothering to
regularly.
Hope this email finds you well,
Regards,
Nicholas