@Sempf @jackryder @briankrebs it's also not restricted to WordPress. How many phone apps have been purchased and compromised with automatic updates pushing them to devices?