extension auto-updates

extensions auto-updates are currently disabled to allow code review and manual handling of updates. I personally do this, but I'm pretty sure most people don't, and since our userbase has expanded to less technical users we might want to reconsider this and enable it in the name of better security. thoughts?