>I am down to zero third-party developers that can get compromised and silently push an update that compromises all my web sessions.

Why would you even have autoupdates in the first place if that is your threat model?