But, at <i>some point</i> there must be trust. If you don&#x27;t trust software, you can try to sandbox it, but now you have to trust the sandbox.  This devolves very rapidly. Open source at least provides a facsimile of recourse - just go read the code - but how much of your currently-running open-source code have you actually read? For that matter, if you had, could you be confident that you&#x27;d understood it? The Underhanded C Contest is a thing, after all. A sufficiently paranoid individual can only run code they wrote themselves. Or, they can choose to run code without a strong understanding of what it&#x27;s doing.<p>If Apple subverts their updates, that&#x27;s mostly interesting as a signal of their trustworthiness moving forwards. The coolest thing about this is that we know it&#x27;s happening at all, I think.