I would like to add my voice to the people in strong disagreement of forcing major version updates using an Opt-Out mechanism, instead of an explicit consent with an Opt-In. Has the core team even checked if this is legal in every jurisdiction around the globe?

While I do understand the security implications of running outdated software, I certainly do NOT understand how WordPress.org plans to grant itself the right to change client websites without their explicit permission on hosting they’re paying for, not WordPress.

There may be business or technical reasons why a client’s website has not been updated.

And there may be cases where a forced update will break a site (White Screen Of Death) or break certain functionalities from plugin / theme incompatibility, or other aspects that an automated rollback mechanism cannot detect as a failure.

What happens if these forced updates break a site and cause financial losses to a client? Or public relations issues? Or customer dissatisfaction? Will WordPress be held legally liable? If not, why? … why could there be action without consequence from WordPress when without their action, the issue would not have materialized?

In the end, I don’t think the “solution” of force-upgrading 3.7-4.6 sites is solving a big enough problem, that it warrants potentially creating an even bigger problem by running the risk of breaking sites and impacting WP’s reputation… what will we have gained, as a platform?