All updates are one-click and it tells you when updates are available. I don't see a problem with expecting people to keep their software up-to-date. I don't know of any software that is secure forever without ever worrying about updates.
And I never said there was a problem with expecting people to keep their software up to date. Just that it doesn't happen automatically. People have to do it. And I know a lot of people with outdated Wordpress installs. That's the reason behind the recent news of 60,000 Wordpress sites being hacked.
Wordpress is pretty secure if you keep it up to date and monitor when updates happen. But saying it is 'insanely secure' is simple ludicrous.