krause wrote: That a production system can turn to RC with a click, is in my opinion an unlikely use case.
If you are a coder/tester than you are likely able to pull/push from git.
I like that it is possible to have the comfortupdate for unstable branches, because it makes things so much easier and it reduces the hurdle for people that are not developers setup a test installation for the unstable branch, play around, report bugs, get familiar with the new system, etc.
I for myself am not too fond of GIT. Tried it, don't really get it, annoys me. So I run 2 installations of the unstable branch just to play around, checking what to expect from the new version and to report problems. The comfort update makes my life easier. But these two installations are totally different from the production environment. One of them might actually turn into a production enviroment one day, when I see that the branch is stable. The other one is a local installation for test purposes only.
The problem is that the unstable releases are offered via the update notifications to everyone. They should only be shown to those who requested it and before going from a stable installation to an unstable installation there should be huge warning. OK, people should read first and inform themselves about what they are doing, but unfortunately this is not always the case. So I think we need to protect these users from going from a stable version to an unstable version - at least by not offering the unstable version in the comfort update, as it is currently done (not push, but pull would be the right approach for this).