[allerratio]

Not updating a package is the best way preventing security flaws to get fixed

[jvm]

If not upgrading the kernel every week or two is a security hole, most people are pretty screwed. I personally do not like to restart that often. Turning off automatic updates just gives you control of when to upgrade.