Hello,
The auto-update is not enabled by default, manual confirmation is required, for example http://prntscr.com/pyiamx . Do you have any additional plugin or custom code that enables auto-update without confirmation by admin user https://www.wpbeginner.com/plugins/how-to-enable-automatic-updates-for-wordpress-plugins/ ?
Regards
