You make the updates user opt-in only. That doesn’t make everything perfect but it reduces the likelihood and potency of the worst scenarios. The EFF advises d

You make the updates user opt-in only. That doesn’t make everything perfect but it reduces the likelihood and potency of the worst scenarios. The EFF advises device makers to never enable automatic pull of updates. Because doing so would open the door for forced silent updates by court order.