CodePush by Microsoft
From an user perspective, that's awful. [<i>Edit</i>: if there's no way to force all updates to be manually confirmed, seems that suggested workflow is that they are: <a href="https://news.ycombinator.com/item?id=10517193" rel="nofollow">https://news.ycombinator.com/item?id=10517193</a>]<p>Seriously, I absolutely hate when apps change their behavior or looks without explicitly asking me for a permission (and so I can make a backup to revert if I don't fancy what goes on).