I agree that we should be able to defer updates and if the client must be disabled until updated then we should be able to use it to access the local data. I'm

I agree that we should be able to defer updates and if the client must be disabled until updated then we should be able to use it to access the local data. I'm going to have to take the new code at some point, but maybe I want to delete some really sensitive messages first. Speaking of trusting code: We need some way to automatically prove that the update our system just downloaded is the same as the one everyone else got. And it would be helpful if other parties could sign off or raise warnings on updates as well and we could see that info before and after deciding to install or defer. Software updates are going to be abused for "legal access" at some point. It is not a matter of if but when. Some kind of mitigation will be needed.