Agreed that asking is largely counterproductive when it comes to security patches (as opposed to feature updates). To satisfy the concerns of folks like @jacquesm, it might be best to implement a soft form of the hidden update: Make them opt-out rather than opt-in.

Keeps everyone happy and dramatically improves compliance.