Being an old-fart with, in a past life, decades in various IT capacities, including a stint as security administrator for a large development group, I never let anything update automatically. It's always "Notify me when and ask ...".
But then I might be paranoid - don't have any password used on more than one site, all are much longer than eight characters, mixed case, all include numbers and/or special characters, no dictionary words or similar allowed, I never let the browser "Remember password for this site", no automatic bill payments of any kind, ...
The only rule I break is I have to keep the login/passwd stuff in a file because the infrequently used ones are forgotten. But that file is encrypted and I allow no inbound I'net connections I didn't initiate.
News 
Market Data 
Discover 
AI
