[DarylZero]

Apparently it's OK because both the vendor and the user are prevented from updating it. Thus there's no power differential between them on that specific point.