Sir
"require the manufacturers to only allow updates from authorized companies, i.e., those with something to lose from breaking the rules."
That rules out any government agency then, since when have they ever lost anything from breaking the rules?