>>Sketch+(OP)
I don't really mind; it concerns only updates of core system, not apps. Apps are still updated, so I get updated browser, mail and other apps, that could be attacked; they are not locked to the system. It makes the attack surface vastly smaller.