Meanwhile the transactional-update.timer contains a "Persistent=true" directive, but the problem persists: after a reboot the timer will still be triggered way too early. I assume this would be fixed if bug#1173276 (respectively the Jira ticket linked in there) would be implemented. The (random) delay of up to two hours has been there from the beginning.