FUD or ignorance?
I'll take the bait. I was going to spend time writing a proper rebuttal but I can't be bothered.
1) It's trivial to remove sudo access from normal users and setup a password for the root account, if you prefer that model.
Having said that, I think Ubuntu has a good default security setup for a home user. The average user would never get any updates installed if they'd have to remember a second password for administrative tasks.
2) Automatic login is only useful in marginal cases (wouldn't use it myself) and also available on other desktop OSs.
Maybe you could apply for a job at Canonical and set them right since they are so obviously stupid and you have a better solution.
