I don't know about you, but I'd rather use the tool that I don't have to hack the training wheels off of first when I'm trying to update 100,000 machines to mitigate a critical security issue.
1. Security updates don't add debconf prompts
2. Supporting large numbers of systems is exactly when a persistent local configure database becomes useful for avoiding unanticipated regressions
