In reply to Dr Gallagher.

That is true, and I didn't create this functionality in the first place, however we have used it extremely responsibly and only turned the flag on for very extreme cases, such as this one. But, you can turn it off if you so choose. It's your site. It defaults to on for security updates only. And we're really picky about security updates. We even require authors to backport for major versions, the same as WordPress itself does. It's basically a full release process. Not easy to do, and fully transparent to all release personnel. I can't sneak in something evil without dozens of people noticing.

But, if you prefer to do it yourself, then I will happily tell you how to turn it off via filters. It's documented. It may not be the best documentation, and that is a fair point. Improvements are welcome.