From a security and software development standpoint changes to a production environment should go through a testing and change management procedure. I've personally had far too many plugins and WP update wreck my site to allow auto updates (not to mention how many Windows updates have bricked computers over the years). I've disabled them all (core, plugins, themes) and now have a set update schedule that follows a system-wide backup.