The average user definitely needs updates, as such a user is typically the most vulnerable target. I would advocate selective choice when updating, but the average user probably doesn't comprehend enough to make those choices, so they are best left with automatic updates.