Well, that's not how it is in Leap. You have both critical security updates and non-critical feature updates in YOU. The fact that it's different in Tumbleweed is unintuitive to new users, and given that the plan is to promote Tumbleweed as an equal to Leap, I think that's a problem. Is there a technical reason why updates to at least the openSUSE-release package can't be also offered in YOU as recommended updates, or is it just a matter of policy?