I wonder how this will affect the development and rollout of the auto-update functionality on themes/plugins front moving forwards, as that was already a fairly divisive feature as-is. Plugins I can kind of agree with (again, for minors not majors), but if WP core can’t be securely maintained… does not bode well? Furthermore, how does this affect the even more divisive “major auto-updates” feature that was in discussion a short while ago? If minors can’t even be securely managed, surely handing over majors is a no-go? Fuel for the “don’t do it” camp (of which, I admit I was a part of)?