Well, the other issue is that if the public lose trust in first-party updates, they're also potentially skipping security patches, making everyone more vulnerab

Well, the other issue is that if the public lose trust in first-party updates, they're also potentially skipping security patches, making everyone more vulnerable on the whole. Obviously this might work in favour of one government's agenda, but equally opens those devices up to exploiting by anyone else (including foreign actors.)