You'd think somebody would learn from Microsoft's long, hard struggle with Windows Update, and make consoles do the same thing Windows now does: download the update in the background at low priority while the console is on, then install it when you shut the console off. (And, for added effect, make the console actually look and sound like it has powered off while the updates are still installing. Windows 8 does this.)
I seriously hate that on my laptop. I want to switch off and be on my way and suddenly Windows tells me it needs to install an update before shutting off. Seriously wtf! This is the kind of things that drives me to Linux, where I know that when I click Shut down, the system will be off in 20 seconds.
That's really bad from a security perspective. It's possible to retrieve all sorts of data from a machine that has been 'slept', especially things like the decryption key for the HDD. Various ports on the outside of the laptop, like USB, have DMA for performance reasons.
No. If I shut down my laptop, my hard drive is encrypted and keys are no longer in RAM (modulo a cold-boot attack, but that is only really useful for <30 minutes after shutdown without preparation).
You must have great reasons to be so paranoid. I am slightly jealous.
I mean the chances of putting the laptop to sleep and having your laptop stolen by someone with enough knowledge to obtain access to the keys in RAM to decrypt the hard drive - well, that would be an amazing story! Not to mention the fact that you have data that would be worth all of that trouble!
I think OSX has been doing this since Leopard, but instead of forcing the update during shutdown, you can apply it whenever you want (it's already downloaded unless you turned auto updates off). I much prefer this route. Forcing the update on a restart or shutdown ends up being more annoying than you think.
I went over my ISP bandwidth cap twice before I realized OSX was doing this in the background. For people with limited bandwidth allowances, this isn't a good option.
It says not to while it's doing it in large lettering. You'd likely corrupt the installation. How much that would affect the user would probably depend on the update.