The Wordpress team is doing a fantastic job with this platform and appreciate their balanced approach to this auto update implementation ( e.g., searching for signs of versioning and disabling updates accordingly ). The assertion of not allowing automatic updates being crazy is just as crazy. As both a "developer" ( as you put it Ms. Gooding ) and a Linux system administrator, I see both the benefits and costs of this new feature. I do appreciate the push to automating security updates from this point forward. The fact of the matter is that it is entirely too easy to install a Wordpress install in some directory in your doc root then forget about it until you visit your domain and find that all the things have been defaced. In the same vein, however, this heavy handed approach is not considering any number of production and development environments. I think it's crazy to allow a 3rd party dictate changes to your website without any idea as to what and when changes are to be made to your website. Really though, we're talking about Wordpress. Can I expect anything different?