How about the device does nothing, and I can download updates from the manufacturer if I choose to? It's my device, not theirs, and I will decide when and if I want to update it.
Sure. If that's what you're looking for in a device. Some users prefer their devices to update on their own. Take Google OnHub[0] for example. They make it pretty clear that new updates will provide significantly enhanced functionality. For users who want a device like that, securing updates is still important.