How about we just get rid of unattended-upgrades instead of disabling it?

roles/common/tasks/main.yml

@@ -49,10 +49,7 @@
           - "92-unattended-upgrades"
           - "95-hwe-eol"
           - "97-overlayroot"
-      when: ansible_os_family == "Debian"
+      when: ansible_distribution == "Ubuntu"
     - name: Configure Ansible user
       include_tasks: ansibleuser.yml
-    - name: Configure services
-      include_tasks: services.yml
-      when: ansible_os_family == "Debian"
   become: yes

roles/common/tasks/packages.yml

@@ -30,6 +30,11 @@
         install_recommends: no
         name:
           - smartmontools
+    - name: Remove packages
+      apt:
+        state: absent
+        name:
+          - unattended-upgrades
   become: yes
   when: ansible_os_family == "Debian"
 - name: Install packages via APK

roles/common/tasks/services.yml

@@ -1,11 +0,0 @@
-#!/usr/bin/ansible-playbook
-# vim:ft=ansible:
----
-- name: Configure services
-  systemd:
-    name: "{{ item.name }}"
-    state: "{{ item.state }}"
-    enabled: "{{ item.enabled }}"
-  loop:
-    - { name: "unattended-upgrades", state: "stopped", enabled: no }
-  become: yes