Early reports indicate that some users running Express <= SP2 are getting SP3 for Express pushed to their system automatically as an important update, rather than recommended, which means that some users are getting it without even knowing about it.  Even though the official Release Services blog states that this behavior shouldn't start ...