In reply to Knut Sparhell.

Arguably it could be made clearer when automatic updates are turned off (due to the presence of a .git directory or other VCS files) - currently this just removes the "Future security updates will be applied automatically." text on /update-core.php, rather than providing an explicit warning that they won't, there or anywhere else.

I'm sure plenty of people are still unaware of this (or that there's a filter to turn them back on).

Also, my honest opinion is the partial version numbers (4.7 vs 4.7.2) now displayed in readme.html are a step backwards. Besides the inevitable confusion this will create, it already seems to have produced false positive warnings from Google, for a couple of my sites at least), that and the plans to remove version info completely elsewhere.