how can an end user confirm this is infact true, and confirm that the updates are also free from any similar nasty issues.

can the user control the updates, including choosing when, what and if they happen.