In reply to Jeff.

This is 110% correct.

I tend favor update prioritization in software. That is to say if a security update needs occur that is a priority. Push it. Anything else should be at a users discretion. It does require a different way of looking at updates in as far as codebase goes. For example, this is why with Windows you see lots of "KB" updates. Updates need be monitored on the installation on an update by update basis. It can be quite complex.