There's an opinion that it's actually harmful, as it creates a false sense of security when there's none (when a powerful malicious party can possibly force ven

There's an opinion that it's actually harmful, as it creates a false sense of security when there's none (when a powerful malicious party can possibly force vendor to make the software silently auto-update and disclose your encryption keys — that really means "none").