• Allero
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    7 months ago

    I mean they can make a sneaky update to the client that introduces such changes.

    Sure, if you won’t update your client, this won’t affect you, but would potentially open you up to other security vulnerabilities.

    • refalo@programming.dev
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      7 months ago

      This was a real concern with MEGA back in the day (after Kim said you should no longer trust them) and a big reason why I prefer to use standalone client apps that I can control the source of.