I tried this a year ago. Had some trouble first downloading this (afaik the project only provided sources, not binaries, so you had to trust some random guy's website to download the .exe), then it randomly crashed within 5 minutes every time I launched it, then I deleted it.

I switched because Google removed the ability to log in and sync settings, history, password, etc. (I realize that in this case I'm directly giving Google my data) but it was a super nice feature.

Brave's Sync v2 works decently well.

It doesn't seem to include an automatic updater.

Simply use a package manager.

[insert link to infamous HN Dropbox comment here]

This is the second reference to that in this thread. It's getting pretty old and I don't even think it's relevant

Yeah just download it over FTP bro!

Use GNU GUIX to manage it. It's been packaged for quite a while now

Third party untrusted binaries last I checked

You can build it yourself, but even with a midrange desktop it'll take you at least an hour to build. A laptop would probably take 2-3 at least.

Are you going to read the source to confirm nothing malicious was added?

There's around 4.9k lines of python code and 15.9k lines of patches. That doesn't seem that hard to scrutinize. From a threat model point of view you should be more worried about supply chain attacks from all the third party programs/libraries you have installed on your computer.

You can pull trusted binaries from OpenBuildService now.