Better still, tell me what the update does, then offer me the choice.

Obviously that's easier said than done for a complex product, but don't expect sympathy when you screw up. Moving away from monolithic all-or-nothing OS updates would certainly help.