[pcmonk]

In the general case, we think evergreen updates are an excellent idea. It's important to note, though, that it's easy to stop syncing from the upstream repository. Notification plus manual update is totally possible. Most people won't want to do that, but some will.

With SaaS web apps, it is of course impossible to turn off updates, which annoys the heck out of me.