I was against automated updates for plugins too, but now I think that it's due. I hope that when WordPress core developers start working on this, they will be open to discussion, so that we can work out together how to allow themes and plugins, both from wordpress.org and outside to get automated security updates.

If we are not careful, the automated update will backfire on us and people will just disable it globally. We need to be able to mark security updates separately, so that they are auto-updated always, while allowing clients to skip versions which may require them to do any kind of manual work.