Comment by HPsquared

In this vein, for particularly sensitive applications (e.g. password managers) I prefer to disable automatic updates.