What are dangerous upgrades? I would consider those dangerous that update the kernel and wireless cards. The problem is if either kernel or the wireless are updated and things do not fit any more. I think that only then there should be an update sugegsted if there can be a clean install. This might also include proprietary graphics drivers. Currently people often experience that they can not update because some kernel modules are not present. I think all kernel related updates should be handled very differently as normal packages. I don't have a solution and I think as long as those updates are made with conary command line there are not much options. But i would like to see a future version of the update manager to be able to understand what is happening and allowing an "updateall" while excluding uncomplete kernel stuff.