It's surprising that people mention all kind of bogeymen but don't mention automatic updates. Automatic updates should be considered harmful. At the minimum, t

It's surprising that people mention all kind of bogeymen but don't mention automatic updates. Automatic updates should be considered harmful. At the minimum, there should be staged rollouts, with a significant gap (days) for issues to arise in the consumer case. Ideally, in the banks/hospitals/... example, their IT should be reading release notes and pushing the update only when necessary, starting with their own machines in a staged manner. As one 90ies IT guy I worked with used to say "you don't roll out a new Windows version before SP1 comes out"