In reply to Hardeep Asrani.

On the flip side of that ... what if WordPress.org itself gets hacked and deploys a hack via the automatic update system.

WordPress.org hosted a malicious download many moons ago. It could happen again, and with automatic updates in place, the consequences could be somewhat severe.

For the record, I am very much for automatic updates, but the potential for catastrophe is there.