Microsoft did bundle the IE banner upgrade advertiser with security updates recently, and that was uncool/unacceptable.
But I've never seen an update security button that actually INSTALLS Windows 10, and that is specifically what this complaint is about, the upgrade starting on its own.
As I said if there is a bug that causes upgrades to occur without permission then people need to provide production steps. If there isn't a bug and Microsoft is doing it on purpose then why is it only impacting so few people? And how can we exclude user error?
The IE security upgrade with the Windows 10 ads went out in the same push that seems to have turned on more aggressive auto-upgrade behaviour, so lots of people -- including media -- are conflating the two.
I wonder how many people are going to disable future security updates thanks to the media coverage?
"I clicked 'update security' and it gave me Windows 10!"