Why not both?

found on Meme Guy

There's so much in updates these days, there could easily be both legitimate security updates and backdoors, and frankly even more than that.