My spicy take is that auto updates are a security vulnerability best classified as "arbitrary code execution".