Hi! I am inclined to demote the priority of this issue to "important", because:
1) The automatic download will not happen unless there is a WiFi connection - downloading over potentially expensive connections does not happen. 2) It does not beak the system on stable machines. It might do so on unstable systems, if the user wasn't careful enough to not install updates automatically. But that's something we expect users of "unstable/testing" to care about, they are experienced users afterall. 3) For users of stable systems, who expect their system to just do the updates, downloading them and making them available is a very nice service, and we shouldn't make it very hard to enable it or add additional steps for that. However, I would agree that an easy and discoverable way to turn off automatic downloads of packages should be provided. I can't find one at time, which is not fiddling with dconf-editor. Cheers, Matthias