Installation of the upgrade is therefore at the user’s/administrator’s discretion. If this is purely because it's not high enough priority to justify pushing a

Installation of the upgrade is therefore at the user’s/administrator’s discretion. If this is purely because it's not high enough priority to justify pushing a new release, they should provide an optional download link for security conscious users. Is there such a link? Sounds from the linked page that there isn't and that the only option is to shell out cash.