in my config, unattended-upgrades does remove automatic packages, but it might not fit your use case