So, errata. Turns out I was wrong too. I met @kirkland Dustin Kirkland at ubuncon-europe last week end and we talked about this.
It turns out this change IS official policy and is advertised here: https://insights.ubuntu.com/2016/12/08/ubuntu-16-04-lts-security-a-comprehensive-overview/ https://wiki.ubuntu.com/Security/Features I still feel this was somewhat under reported and that the classic media sources that cover Ubuntu have dropped the ball big time but I can't fault Ubuntu for that so I'm closing this issue. I'll just have to remember to turn this off on any new install or mention it to the machine's owner and explain the possible consequences. ** Changed in: unattended-upgrades (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1700930 Title: Default action policy for "Security Updates" changed between 14.04 and 16.04 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/1700930/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs