We need silent updates to be disabled by default until the user opts in, and we need 7 figure bug bounties on any method of bypassing that. We also need a certi

We need silent updates to be disabled by default until the user opts in, and we need 7 figure bug bounties on any method of bypassing that. We also need a certificate transparency type system for updates so users know whether how unique the update they're being asked to accept is. Otherwise this functionality will be abused for wiretapping purposes.