Security-wise I'd be very surprised if Chrome updates weren't signed; MITMing of auto-updates isn't exactly new (see EvilGrade). So I doubt it's an issue there.

That said, I agree that there should be an option (not a prominent one) to switch it off.