So long as both manufacturers and executives are willing to assume unlimited liability for all direct, incidental, and consequential losses caused by both updates themselves and any security vulnerabilities in the update mechanism, and are held criminally liable in cases where negligence leads to injury or death, I have no problem with this.