Is it safe to upgrade Gateway while Workstation is running?

  1. Is it safe to upgrade Gateway using upgrade-nonroot while Workstation is running? When some important gw packages like tor or whonix-firewall are being upgraded, is there any chance for IP leak from Workstation?
  2. Is it safe to perform sudo apt autoremove? Should I do this or I should just type upgrade-nonroot and forget?

Yes.

No.

See Security Overview.

Re-install Meta Packages and Safely Run Autoremove