Our apt updates and upgrades really are hit or miss because landscape or whatever mirror goes down sort've often. Check to see if we can use something like - https://wiki.debian.org/AptCacherNg to have a local cache to update from ...or some type of "allow caching for package updates except for security updates"