Uhm... as user... how I can be aware of the updates conflict with my plugins? So, whatever, I'll click OK to a security update. For sure, I don't want for my site to be less secure. The core dev team is doing all right: from an user POV, there's no need to accept or refuse a security update. Only to accept it. If something goes wrong with the core, the core dev team had to fix it. That's all.