> And if a fix for a critical vulnerability and an ad feature are both in the same update?
Can you point to actual real-world examples where this has been the case?
I don't see the point of this stretched hypothetical. If it were to come up, then you could deal with accordingly - for instance by getting the update and then blocking the ad server somewhere upstream in your network path.
They don't actually have to be in the same update, the security fix just has to come after the ad antifeature with no separate patches presented, only a linear series of versions. And that linear model is extremely common. Anything using the linear model that has both antifeature updates and security updates at unpredictable times is very likely to run into the “can't install the security update without accepting the antifeature” problem.
> I don't see the point of this stretched hypothetical. If it were to come up, then you could deal with accordingly - for instance by getting the update and then blocking the ad server somewhere upstream in your network path.
And then not buying that brand's products in the future. And advising others not to buy them.
My point above was not about how to deal with it, but only to point in the direction of it being very very much not a “stretched hypothetical”, but a reality of a vast quantity of consumer software, including critical things that are difficult for people to replace. (My worldmodel doesn't judge your proposed counter very highly either, FWIW, but I don't feel up to arguing that part just now.)
