Ordinary site owners would have been helped by first merging some code that would make it easy for them to identify out-of-date plugins/themes. i.e. Ones that haven’t been updated for a long time and have no updates apparently available. Such code will always be the major area of risk when upgrading.