The way the check for signature and certificate in the updater is naive.

I've been pointed out it could (with difficulty) be used against the user.

Found by @JarLob