OK.. Hang on sec. I would totally agree that the installation of a plugin on a client's site (without permission) is out of bounds. But I gotta ask... how is it OK to update WP itself in much the same way?