I've typically had it set to download and tell me when installing updates so I can say yes or no myself. On this new machine I think the default is to automatically load and install, and I'll have to go set my preferences.

On another note, this note about ransomware is something to take note of. I don't see a thread dedicated to these threats (in my traced threads, at any rate). Maybe it's time for one of those.