Re: Upgrading via Magento Connect - is it the same as patching?
No and Yes.
No, upgrading extensions is not the same as applying SUPEE patches.
Yes, if you are using Magento Connect to upgrade Magento to the latest version AND THE SUPEE PATCHES ARE INCLUDED IN THE VERSION UPGRADE, the upgrade is the same as applying the SUPEE patches.
You must check to see what SUPEE patches have been applied to minor Magento upgrades, in versions previous to 1.9.1, often the upgrade did not include some or all of the SUPEE patches and you would have to patch every time you upgraded Magento until the SUPEE patches were included. It seems that Magento finally got Security Religion in 220.127.116.11 and is starting to make sure that the SUPEE patches are all applied to the latest Magento version release available. We'll have to see if they continue this in future, but it would be a vast improvement over installing 18.104.22.168, fully patching it and then finding you upgraded to 22.214.171.124 and were no longer patched because the interim patch had not been applied until 126.96.36.199, and had completely reopened all the security holes.