settings.json that fails to decode falls back to defaults, which turned automatic updates on even for someone who had turned them off. The fallback now keeps them off until the file can be read.