Maybe it should kick in with a message or something, before the final upgrade step (Install update), just to let people know it's there. It requires a huge amount of trust, just to assume that it is applied and will work