Simple "I want this feature to be enabled" button in settings (!) is enough. And I mean setting NOT HIDDEN somewhere behind tons of * in about:config.

I'm using (linux) distribution with pretty nice way to deliver software updates. (At least from my point of view) There is no need to have redundant malware entry channel into system.

I very well do understand needs to support moving web.

Auto update is something completely different than remote messing with users settings. I cannot help myself this reminds me of "windows support" scammers from last years.