I like Elpie's comment about the security patches.

If security patches were separate from functional upgrades, then people could have their blog *automatically* apply those. Yes, some security updates affect functionality, but for the most part they don't.

The only part I don't like about this suggestion is that it would keep people on older versions of wordpress longer. But I guess that's not the end of the world.