The other issue is that they push to everyone - as someone who at my last job had a million boxes in the wild, and was very aware that bricking them all would k

The other issue is that they push to everyone - as someone who at my last job had a million boxes in the wild, and was very aware that bricking them all would kill the company we would NEVER push them all at once, we'd push a few 'friends and family' (ie practice each release on ourselves first), then do a few % of the customer base and wait for problems, then maybe 10%, wait again, then the rest. Of course we didn't have had any third party loading code into our boxes out of our control (and we run linux)