Where is a security for the user being spammed with a lot of unchecked updates not easy to unroll-up after installing?
No technical solution can fix this, the situation is absolutely doomed to continue being an insecure, borderline unusable mess.