In reply to dlouwe.

Well, automatic plugin updates are already opt-in since you would need to edit their behavior in a plugin or through wp-config. I'm talking about whether or not we may find ourselves in a situation where plugin updates that fix critical security bugs are pushed out and sites that are running WP 3.7 or above will auto update regardless if it's turned on or not, for the sake of updating the site.