If you don't trust their update mechanism to remain uncompromised, why do you trust their website to remain uncompromised?