[taivokasper]

That's not how things work! If the OS is not secure then app updates are rendered useless.

[throwaway613834]

I think to a large extent (i.e. enough to eliminate the worry in practice) it is how things work, actually. See my reply to the sister comment here: https://news.ycombinator.com/item?id=15040745