If there were one or two mirror admins for mirrors in the main eu or us mirrorlist who be willing to do a little access log data mining... we could probably get a pretty good histogram look at how many of the update packages users are typically pulling over. We could probably get a read on the percentage of users who are just pulling security updates too.