In the release notes of 7.0.5-h2 there is now this information:
Before you upgrade to PAN-OS 7.0.3 or a later PAN-OS 7.0 release, you should review the information about how to upgrade
a firewall to PAN-OS 7.0. Additionally, if virtual system (vsys) configuration is not enabled on your firewall or appliance, you
must reboot your firewall or appliance after you install PAN-OS 7.0.1 and before you upgrade to PAN-OS 7.0.3 or a later
Does anybody have practical experience with upgrading to 7.0.x? Do you really have to install the base release 7.0.1 (with its bugs and vulnerabilities), reboot into it, then install latest bug fix release (e.g. 7.0.5-h2) and reboot again? With previous major versions you could just download the base release and latest bug fix release, then directly install latest bug fix release and reboot just one time.