It’s a good assumption that the average person will not care about updates, and in fact, probably would not even know if and when an update is occurring. For that reason, it’s good policy for auto-updates to be default behavior. However, there must always be an ability to opt out indefinitely