This is easy to say as someone who has never managed a product, but I feel silent self-update is table stakes for consumer-facing products at this point.

Requesting permission to update throws a significant amount of users. They're typically not capable of determining if the request is legitimate or not, they're fearful of updating things they rely on, and god help them if it's not a one-click update.