What Chris said. There were some threads a year or two ago on this. If you manually install an update in 3CX it doesn't install security updates, and they recommend not installing them yourself in case something breaks. A workaround is to enable automatic updates only when you want to install an update, and disable them afterwards.
3CX of course has choices for Daily or Weekly checks. I've seen platforms that have an option to either accelerate or delay installs so the admin can decide if a server should be on the bleeding edge/beta/prerelease or be extra cautious and delay a month or so, in case problems crop up. But in this case if Weekly is too fast then you'll have to disable/enable the check yourself.