> Yes... clearly the philosophy of 'let the user install standard packages'
> is at odds with the philosophy 'do not install a daemon unless you intend
> to run it'. If the user has rights to install httpd, then the default must
> be not to start it.
Running updates and installing new versions of existing packages is a
critical action required to keep your system secure.
This should be as easy and convenient as possible.