WP auto-updating does have its risks of course - we've seen WP 4.7 introduce this big vulnerability for example (though I believe you can hold back these "major" updates and do them manually). Plus a lot of admins would prefer a scheduled time/day to update - it seems that by default auto-updating is fairly random w.r.t to its scheduling. Plus you'd want to update dev/UAT first before live in case there is breakage. Also, as far I know, WP auto-updating by default doesn't backup the Web tree/DB first and has no easy way to roll back a failed auto-update because of that (so off to tape backups you go whilst the site can often be down).
Still, WP updating whether its manual, scripted or automatic is still a million light years ahead of Umbraco's updating (which usually can't be upgraded between major releases, so many Umbraco sites get stuck on a particular major release for a very long time, even after support has ended).