I agree, I don't see why it shouldn't be similar to almost every other linux distro where most critical security updates are in modular packages. Frankly, I actually want the feature upgrade, but I certainly don't want to be tricked into it or told after it's already done that a big binary update blob is has been downloaded to my phone.