As long as there is an engineer sitting at the ready watching the automated update and ready to jump in should it break then yea, I see no problem.
But if thats the case then why schedule the update to happen automatically at all. If someone is already required to be present and alert at the time why not just have them push the buttom that starts the update just so the system verifies a human is present for the process. Almost like a deadman's switch.