I’d like to see some thoughts on where we go from here. Is there a way we can keep end users protected even despite potential compromise of services like ToDesk

I’d like to see some thoughts on where we go from here. Is there a way we can keep end users protected even despite potential compromise of services like ToDesktop? (eg: companies still hosting some kind of integrity checking service themselves and the download is verified against that… likely there’s smarter ideas) The user experience of auto-update is great, but having a single fatal link in the chain seems worrying. Can we secure it better?