doesn't seem like it:
> I can be a passive user of an excellent extension for years, and wake up one morning to discover that my browser has (silently!) upgraded the extension
you want to roll the dice with automatic updates, you have only yourself to blame when they break something you care about. people always scream BUT MUH SECURITY, and at the same time ignore every other awful change that is rammed through automatic updates. pick your poison.
I don’t want to “roll the dice.” There is a significant difference in user model between trusting a single identity to provide updates automatically, and naively trusting updates that come from a new identity.
In the context of web extensions, not auto-updating is frequently not an option: web extensions are part of an arms race between users and websites, with the extensions continually playing catch-up.
just because you might find one choice extremely distasteful, doesn't mean the option ceases to exist. so I will say again, pick your poison. you opt in, or fail to opt out of automatic updates, then you accept anything that might happen because of that.