We should add a simple maintenance page that does not rely on any autoloader existing or working correctly. It should therefore not require any config or session and be enabled by a file store/UPDATE_LOCK.php. This could both be used for normal maintenance as well as for automatic updates and will prevent any issues that might creep up while replacing core PHP files.