Within reasonable bounds, I dont think the numbers matter as much as the business behind them. Using large scale and reputable plugins is the main thing.
Also Id suggest hooking in with some alert system that tells you when there is a known vulnerability. So many sites site un-updated for years with open flaws. Auto update probably helps this for low maintaince types, personally I dont auto-update most plugins to avoid the occasional release issues but use centralised management software so Im updating close to real time.
Within reasonable bounds, I dont think the numbers matter as much as the business behind them. Using large scale and reputable plugins is the main thing.
Also Id suggest hooking in with some alert system that tells you when there is a known vulnerability. So many sites site un-updated for years with open flaws. Auto update probably helps this for low maintaince types, personally I dont auto-update most plugins to avoid the occasional release issues but use centralised management software so Im updating close to real time.