WordPress’ plugin team has published a statement regarding plugins making changes to users’ update services:
Unless your plugin has the purpose of managing updates, you must not change the defaults of WordPress’ update settings.
You may offer a feature to auto-update, but it has to honor the core settings. This means if someone has set their site to “Never update any of my plugins or themes” you are not to change those for them unless they opt-in and request it.
The statement was prompted by plugins overstepping this boundary, which, up until recently, has simply been understood but not explicitly forbidden. Mika Epstein said the practice “destroys the faith users have in you to not break their sites.” It also reflects poorly on WordPress as a whole when plugin authors abuse core features to serve their own interests.
“Sadly, this happened recently to a well used plugin, and the fallout has been pretty bad,” Epstein said.
She did not…