Yes, for both security and functionality reasons, we require customers to run the latest versions of WordPress. We know making these larger software updates can be tedious and time-consuming, which is why we perform these updates for you.
WordPress core updates are mandatory and automated by default. If needed, customers can request a version hold as a temporary fix should you experience any issues resulting from an update. We create nightly backups of both your filesystem and database, so you always have the option to rollback if need be. If you have questions regarding an update being pushed, please open a support ticket and we will address it together.