You have inferred that people who setup automatic updates will get
Internet Explorer unknowingly...
Automatic Updates does *not* mean the Internet Explorer will get
installed. 9 times out of 10 - it will, because users just assume
they should click OK when a popup happens (or 'I agree' or some
other affirmative answer..) After all - nothing that pops up on
their LOCAL machine could be bad, right? *grin*
This is what malware writers DEPEND on..
Visit this link:
http://www.microsoft.com/technet/updatemanagement/windowsupdate/ie7announcement.mspx
Where it states,
"... Automatic Updates Delivery Process: The automatic delivery
process will notify users that an update is available and allow
users to choose whether to install Internet Explorer 7 ..."
and
"... Automatic Updates will only offer Internet Explorer 7
to users with local administrator accounts. Automatic Updates will
notify all such users (including those with Automatic Updates
configured to automatically download and install updates) when
Internet Explorer 7 has been downloaded and is ready to install.
The notification and installation process will not start unless and
until a user who is a local administrator logs on to the machine.
Users who are not local administrators will not be prompted to
install the update and will thus continue using Internet Explorer 6
..."
The prompt (that even those with Automatic updates enabled) get when
Internet Explorer begins to install can be found in a screenshot on
the page above...