In reply to KTS915.

I wouldn't mind seeing security updates contain nothing but the fix but depending on the timing of its release, the team usually bundles in fixes applied since then so there isn't two separate releases. However, with the notion of automatic updates for point releases, maybe that's really less of an issue to be concerned about.

Is there any way you can document your experiences with automatic updates and complex sites and describe what breaks? Is it core, is it a plugin, is it a theme that breaks? By documenting the process and describing what goes wrong, it's possible you can help improve the process so you experience fewer issues updating on more complex sites.