&gt; central control of the code<p>That&#x27;s just an excuse to not implement backwards compatibility in the protocol. Central control is also a security risk, as we&#x27;ve seen recently with Apple and the FBI. If the code is controlled centrally, the FBI (or whomever) only has to strong-arm one target.<p>&gt; gets a notification and can click one button to update their copy<p>That sounds like you&#x27;re trying to keep the user in control, which is great. I haven&#x27;t head of Sandstorm before, but it sounds interesting.<p>Have you considered the problem of forced updates? I&#x27;m not sure there is a good way to protect against the FBI trying something similar to the recent drama with Apple, where they order you to force a &quot;special&quot; update on {someone,everyone}.