There's another implication. Since the update files can come from practically anywhere, there's no practical way to block them at the firewall. So not only are home users required to accept updates but there's no practical way to block that feature upstream without collateral damage.