[jeffbee]

Users are complicit. Why did this user install the update? Were they suffering from an issue it supposedly solves? My six-year-old Honda has never had a software update, and in any case "OTA" updates can only be initiated by the user.

[mukbangpervert]

They described their car as having "auto-installed" the update.

An update which advertised, amongst other features, that it "rectifies errors and prevents security gaps" and stated "This update is recommended for everyone."

Borderline insane to refer to the user as "complicit" in that case.

[afavour]

No win scenario. We need to install updates because of security vulnerabilities. But we shouldn’t install updates because they might introduce bugs.

[atmavatar]

Of course, we largely only need to worry about the security vulnerabilities because manufacturers increasingly hook our hardware up to the internet so they can exfiltrate data about us.

[bigstrat2003]

To be honest, with how poor quality some software has gotten, I refuse to update it, security issues or no. Most products aren't that bad, thankfully, but there does reach a point where the theoretical risk of a security vulnerability is outweighed by the immediate issue of "this crap doesn't work any more".

[spaqin]

Security vulnerabilities get too much credit. It's "think of the children" of the software world. Most updates don't fix any, most vulnerabilities won't get used in the real world against you either, and in many cases the security is for the corporation against the customer instead.

[pbhjpbhj]

'Security and bug fixes' is what companies say when they want you to update. They might be correct. You see that on Google Play store a lot ... Really they should mandate availability of descriptive and accurate update notes. But then Google are one of the worst offenders, often their updates don't even include details at all. One has to go spelunking through comments and forums trying to find if the update actually fixes anything or if it's just to include a few more ads or tracking mechanics.

Hooray for OSS, F-Droid is way better ime.

[FloatArtifact]

The user is not at fault for installing an offered update.

[spaqin]

While the users are not at fault, this culture has certainly turned me way more careful and deliberate about applying updates - if it's not broke, I usually don't; big corporations are more suspicious of breaking things and open source are usually good about them; and if there's no changelog or it's very generic, I'll stay away as well.

[hackerdood]

Some cars will force the update on you after dismissing it.