WordPress’ plugin team has publsihed a statement regarding plugins making changes to users’ update services:
Unless your plugin has the purpose of managing updates, you must not change the defaults of WordPress’ update settings.
You may offer a feature to auto-update, but it has to honor the core settings. This means if someone has set their site to “Never update any of my plugins or themes” you are not to change those for them unless they opt-in and request it.
The statement was prompted by plugins overstepping this boundary, which, up until recently, has…