The savedefault stuff, while convenient, carries the risk that you forget that you are on an old kernel since an update won’t make you boot the new one, so you could stay on the older (and potentially vulnerable) one forever…
I’d add an extra warning to regularly check newer kernels to that part of the doc…