&gt; If you&#x27;re using the automatic updating functionality (which the majority of people are) then it absolutely applies.<p>Which is why I don&#x27;t get my updates via an automatic Mozilla updater, but rather via my distribution.<p>&gt;  The reality is that if you trust Mozilla to provide software updates then you can trust them to provide Javascript<p>As I indicate above, I don&#x27;t trust them that much. You&#x27;re right that the update problem and the JavaScript problem are identical.<p>Allowing pushed updates makes individual targeting far too easy for an adversary.