Oh cool, I didn't know about this. It's always been something I've been concerned about, but wasn't sure how to address. I like their summary: Cryptographic

Oh cool, I didn't know about this. It's always been something I've been concerned about, but wasn't sure how to address. I like their summary: Cryptographic signatures prove that a message originates from somebody with control over the private key, but it's impossible to prove that the private key didn't sign additional messages. In update security this means a signed update is a strong indicator the update is authentic, but you can't be sure this update is the same update everybody else got. Somebody in control of the update key could craft a malicious update, sign it and feed it specifically to you.