Google bans self-updating apps in the Play Store
play.google.com
play.google.com
And still a javascript based app can self update with eval.
Edit: Just to clarify. I do not approve walled gardens or feudal models of security. I believe that every user should have the full control of the devices and its security be his own problem.