Thats the paranoid answer. The much simpler answer is that you don't maintain the software on it; updates are done silently by whatever the hardware vendor deci

Thats the paranoid answer. The much simpler answer is that you don't maintain the software on it; updates are done silently by whatever the hardware vendor decides passes their muster (or motive).