Regarding the latest update, is there anything that requires manual intervention?

You likely had or have a pacnew that you could choose to integrate according to your needs.

This appears to be identical to the default.
It is dependent upon your local system configuration whether that is sufficient or optimal.

For more in depth information on this specific pacnew (as it occurred some weeks ago) you may see this thread;

In another example this is used on one machine that does not use encryption or bootsplash;

HOOKS=(autodetect systemd microcode modconf kms block keyboard filesystems fsck)