This was my first concern followed by, "wait, Chrome silently auto-updates..." As far as I know it silently auto-updates across major versions as well as minor

This was my first concern followed by, "wait, Chrome silently auto-updates..." As far as I know it silently auto-updates across major versions as well as minor. The automatic updating of Flash 10.x that got linked on HN a little while ago is a great example of how this is good. A widely publicized hole in Native Client could turn it on its head quickly. It's a gut reaction on my part, but distributing Native Client to Chrome's user-base feels premature. It's only been an acknowledged project at Google for what, less than two years? I recall hearing about it at I/O 2009, and I'd wish they'd let it bake a while longer.