They could, but a developer won't design it that way unless they're already trying to sidestep update mechanisms. The point still stands that there's a differen

They could, but a developer won't design it that way unless they're already trying to sidestep update mechanisms. The point still stands that there's a difference between "I trust the developer now" and "I trust the developer forever".