But the change to "mandatory updates" came after numerous incidents of "millions of users running unpatched software fell victim to the latest exploit". This kind of bad publicity started the trend of software makers forcing updates on users.
Separating security patches from feature updates is better but doesn't 100% guarantee there are no data-losing bugs.