And then the vendors (and the security people) claim that automatic updates are fundamental, because otherwise people wouldn't install them. But maybe, just maybe, people don't want to install updates because they're being force-fed them, with no information about what to expect, and half of the time the update makes the experience worse.
The road to a better user/vendor interaction starts with providing meaningful changelogs and dropping the paternalistic attitude about updates.