Except this wasn’t an auto update - it’s a completely different infrastructure pushing stuff into the browser without affirmative consent or even knowledge. And in true malvertising fashion, this system is both opt-out and turns itself back on sometimes.