At that point just use http + sigs. If you have working signature infrastructure you don't need encryption. There is some danger, attacker can see what you are

At that point just use http + sigs. If you have working signature infrastructure you don't need encryption. There is some danger, attacker can see what you are getting, but that's far lower than "the update broke"