It has been bought to my attention that under some circumstances (e.g. python module package) a security update might break the application. Simply restarting Apache should resolve the issue.
However, pondering this further, it occurs to me that under some circumstance, a secupdate may not be fully applied until a restart of relevant applications (e.g. webserver). So perhaps we should default to restarting these services?!