Can't resist ... am going to inject something into this thread ...
Trying to keep this specific to just moodle itself, but does expand into DB.
The reason things like Softac exist is due to gaps. Users want something 'easy' - install and/or updates/upgrades. But the further one strays from 'native' the more potential there is for issues.
In the case of Moodle, upgrading is documented ...
there are two ways ... in the link above you will see a section on
git.
If, where you
host, your cPanel shows a Git icon and more importantly a Terminal icon, you have the ability to use git from command line to update/upgrade your moodle core more reliably ... if you can get by 'clas' (command line avoidance syndrome). Don't have to be a CLN (command line ninja) to do it either!
As we know, the number 1 or 2 reason for breaches is 'failure to fix or patch' ... that goes for the operating system as well as applications.
General Release Calendar for Moodle
Does softac offer point releases?
Unlike, WordPress, Joomla, other which has built in updating/upgrading ability, Moodle does not ... thus Softac gap filler. I'll say this though, if they don't provide reliable point releases they are falling short of filling that gap.
Another reason for Terminal access ... better specific backups with native to OS tools - like tar and
mysql/
mariadb command line tools mysqldump.
'SoS', Ken