In reply to Brandon Kraft.

Yes, more education is definitely needed, because the fact that Yoast's updates often cause issues with people's installs makes people wary of getting a forced update for one of his plugins if they don't know the process the core security team uses. We'e yet to see anything official published on WordPress.org about this process.