Enabling auto-updates is dangerous, yet I see so many #privacy #cybersecurity focused individuals recommending it.

You are giving whoever controls the updates full control over your software. With auto-updates, it is possible to:

🔸 Insert backdoors, spyware, and malware.

🔸 Add unnecessary features.

🔸 Remove features, make unwanted changes.

🔸 Add new bugs.

🔸 Use users like guinea pigs with shit like A/B testing.

🔸 Whatever else malicious developers want to do.

This is especially dangerous for browser extensions. It's common for developers of extensions to receive a ton of emails from "companies" trying to purchase their extensions for thousands of dollars. The goal? To do malicious stuff with the users who have them already installed.

Auto-updates can, and will be used for malicious stuff. Keep control of your software by making sure updating is always done manually.