[ajconway]

> I do not want my 2 ton moving vehicle updated on a whim.

The car won't update itself, so:

1. Ignore any updates as they become available.

2. Problem solved.

[MereInterest]

For devices that connect to the internet, such as for updating maps and real-time traffic data, does the lack of security updates mean that your 2-ton moving vehicle is now somebody else's 2-ton moving vehicle?

[pjmorris]

Which is actually an argument for non-updatability.

[MereInterest]

Completely agreed. Mainly, I wanted to make a distinction between "cannot be updated" and "can be updated but isn't". The former is a design choice that removes entire classes of vulnerabilities. The latter is a usage choice that keeps vulnerabilities open.