> the backlash in the Ubuntu community for having snap packages on servers (and to a lesser degree on desktop) would suggest that that's just not enough to get

> the backlash in the Ubuntu community for having snap packages on servers (and to a lesser degree on desktop) would suggest that that's just not enough to get people to buy into it. > Personally, I don't really have a good answer. Both approaches are somewhat flawed, just in different ways to different folks in different circumstances. You hit the nail on the head. It depends on the target market for your application. If your users do not expect to manually update, it’s probably a good idea to build an auto update mechanism that is opt-out or opt-in. It might not be worth it for other target markets though. However, my point was that just because an application isn’t doing something critical, doesn’t make security vulnerabilities in that application harmless.