Can I submit a patch?
I mean "amendment"? As much as I hate the practice of adding thoroughly unrelated amendments to laws, I would find a certain poetic justice in also outlawing "vital security updates" that include unannounced side-effects like resetting the default browser, overriding my opt-out of having all my files sent to their cloudy backup, or ticking the "just automatically update from now on, I don't want to be bothered for approval ever again" box . That would go a long way toward making people a little less afraid of "updates" when the vendor does issue them, after the spooks admit telling the vendors about them