Security concerns on using Update Manager without a dedicated site

[ozfiddler]

Yes, I understand your view.

But it’s interesting to note that Joy says this:

@joyously

I don’t really trust plugins with that Update Manager in them

Whereas I would never install a plugin that says this:

@smileBeda

I’d prefer asking the user to install the git hub updater plugin

It makes me think the current arrangement has some problems.