The author makes some important points, but there is a cruel irony: He&#x27;s a main developer of owncloud, which in terms of security updates is a huge problem.<p>Owncloud has its own update mechanism, which unfortunately usually doesn&#x27;t work in the real world (it breaks if you have any reasonable timeout for your PHP applications, which every normal webhoster has). There are likely countless owncloud installations with known security issues that their users tried to update, but couldn&#x27;t. (The alternative is a manual update on the command line, but given the target audience of owncloud it&#x27;s safe to assume that many of its users aren&#x27;t capable of doing that.)