Three more pull requests were opened, 1) to add basic validation of ajax requests, 2) to swap the term Core with WordPress in updates-coreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress., and 3) to only show the compatibility note in upgrade-core if an update is not 100% compatible.
The PR to add the ability to activate a Theme after installation was merged and the feature added.