Re: or whether Google is simply doing a terrible coding job
Yeah. While a on/off switch for updates might partially be a security risk, I'm certain certain global ISP/service providers are thankful for it when a runaway/bugged script/update/settings propergates globally, and they frantically rush around trying to fix it.
[Looks at the multiple day cloud/service outages this year alone]
Oh, maybe not then.