I’m trying to point out that default automatic updates does not mean giving any trust to a plugin author. wptavern.com/how-to-stay-in…