

That becomes a problem when we’re talking about the 1% of updates that are sent to prevent your smart TV from becoming part of a distributed botnet, though. Some people might even complain about the 9% of updates intended to keep up with churn in the APIs of 3rd-party services that are part of the functionality the device was purchased for.
What we need is something that restricts forced updates to those categories. That requires regulation, which likely means starting in the EU, since that’s the only major jurisdiction that’s (sometimes) pro-consumer. We also need regulations on labeling that force the manufacturer to indicate on the outside of the packaging in big letters exactly what advertised functionality of a device will break if it’s kept off the internet.


If I were talking just about devices I myself use, I would say yes, get rid of all forced updates, but unfortunately, smart TVs are not bought only by the technically adept. (You should see my mother trying to use hers, and given her age and general incomprehension of technology I doubt her understanding is going to improve.) Their devices still have to be patched to keep the botnets from going after the rest of us. I don’t particularly like forced updates, but for security updates on consumer devices they sometimes are the lesser of two evils.