You probably noticed this already, but scheduled firmware updating is now a thing. (at least on my Terrastations)
My TS51210R s were able to find an update and install it at a specific time during the day (provided they were connected to the internet) without any IT interaction.
- I had to change the Gateway IP to: User(static) in order to enable internet access, and turn on scheduled updating in order to set the schedule.
I don't think the easy roll back portion you mentioned was implemented, but applying a USB backup of the NAS settings from an earlier time does appear to roll the NAS back to the version of firmware that the NAS had when the settings backup was created. (On my NAS it made me update the firmware to the latest version in order to apply the backed up settings, which then rolled the NAS firmware back to the older firmware version.)
Thanks for the feature request post!