Postgres automatic minor version upgrade

Hello,

We are using Postgres 11.6 through AWS relational database service. As part of its RDS service AWS offers automatic minor version upgrade. If we turn this setting on the minor versions will get upgraded without us even knowing about it. We are in a security sensitive vertical so we would like to ensure we don't miss out on critical security patches and bug fixes. We also use AWS Multi Availability Zones which I believe is built upon Postgres hot standby HA feature.

We are not very clear on what are the possible risks we may be opening ourselves up to if we did automatic minor version. I would appreciate any suggestions on how to go about  understanding the potential risks with using automatic minor version upgrade.

Thanks,

Shantanu