You misunderstand: in WordPress, this is completely automated, enforced, opt-out, one might say. It's rather hard to disable, but only applies for security patches.