Service workers don't solve the problem. First, service workers themselves are updated outside a service worker, so that is code I can't easily intercept befor

Service workers don't solve the problem. First, service workers themselves are updated outside a service worker, so that is code I can't easily intercept before it is executed. (And first page load as always.) Secondly, I still need to trust you not to make a mistake or not not be malicious over a long period of time making small tweaks that look innocent but over a year cause harm. Third, users will become fatigued if every update you make causes them to click ok.