We definitely want up-to-date software that has patched its vulnerabilities, but you’re right that auto-updates are a bit of a liability lately. Especially so if we keep vibe coding security nonsense into our apps.

I’m more worried about the auto-on telemetry, gives a sense of “we don’t bother asking”.