If not upgrading the kernel every week or two is a security hole, most people are pretty screwed. I personally do not like to restart that often. Turning off automatic updates just gives you control of when to upgrade.