Given all the problems with security holes last year in earlier WordPress versions, I would expect better documentation in the Codex about how to do this correctly. One friend who has been a systems administration for 15 years took a quick look and said that FTPS option is broken.
The automatic upgrade is so convenient, but everybody I know who is vey experienced is concerned about security and tells me to just use SFTP and manually do upgrades.