In reply to David Anderson.

Alerts in the dashboard would be a good measure. I agree, automatic updates are not a good plan. Than in itself as you noted can result in much ugliness.

I think in the Dashboard WP might think about considering a "Urgent News" type modal so even if a WP webmaster is not using a plugin lets say that has a breach they can start getting informed about such matters and how to best prevent malicious practices.

Perhaps even a sort of push backend so as matters of concern happen or even good instruction becomes available WP can leverage that.

Sort of a tutorial push to the backend.

The same problems exist for just plain ole' PC users. I cannot begin to tell you how many times I have removed security software from others PC's like Norton, McAfee etc. and stuck Comodo Internet Security on their systems or installed it on peoples laptops where pretty much nothing was there.

Comodo is wonderful if you have never tried it.