> This is still far worse than just enabling automatic updates in Wordpress. A webapp updating itself, having write access to its files (I see zero privilege s

> This is still far worse than just enabling automatic updates in Wordpress. A webapp updating itself, having write access to its files (I see zero privilege separation in [1]) and getting updates from a hopefully not compromised source (see Linux Mint lately), that's just asking for trouble. I trust the Debian mirror infrastructure with signed packages that are updated by a privileged system user way more. [1]: https://codex.wordpress.org/Configuring_Automatic_Background_Updates https://codex.wordpress.org/Configuring_Automatic_Background...