You're not zap-able!

Is it possible for Seedsigner to securely validate its own updates? I do it anyway with CL or Sparrow but I'm sure most don't.