This is a good point, in particular regarding the updates that you do not know happened. This is also true for a lot of modern greenfield applications where fo

This is a good point, in particular regarding the updates that you do not know happened. This is also true for a lot of modern greenfield applications where for the legitimate ones this is a blessing and a nightmare for the malicious ones. We just had a strike of cases related to a ODF reader that got updated with malware (https://www.google.com/amp/s/www.bleepingcomputer.com/news/security/tamperedchef-infostealer-delivered-through-fraudulent-pdf-editor/amp/ https://www.google.com/amp/s/www.bleepingcomputer.com/news/s...)