In reply to Greg Montaño.

Hi and thank you for raising such important points!

This is why auto-updates can be enabled as opt-in for each item (plugin/theme). This way, you can opt-in manually for the updates you want, an even completely disable auto-updates.
This is already handled in a Core ticket, and I'm taking care of also ship this enhancement in WP 5.5, alongside plugins and themes auto-updates :-)