Kernel updates are usually held back and need to be selected manually. E.g. apt-get install linux-image-amd64.

I prefer rsync for private backups and employ bareos in my company for all servers.