Surely there's a middle way between forced updates and no auto update at all. 

Ubuntu Server has automatic unattended security upgrades that works well. Surely desktops need that as well. Actually that's one of the reasons why they're replacing deb packages with Snaps - because of the built in auto updates.