Don't those same problems also exist for explicit updates? I suppose it's a mitigating factor on the part of requiring user opt-in, should a problem occur, but

Don't those same problems also exist for explicit updates? I suppose it's a mitigating factor on the part of requiring user opt-in, should a problem occur, but that's (IMO) only a fortunate side-effect. It's like saying that walking is better than driving, because if you run into something you'll only bruise your shins.