With respect to the Xolox team programing abilities, but "security by obscurity" gives my paranoid brain some reasons to keep the autoupdate feature disabled. :)
I know that giving more details about the auto update security checks may or will open doors for a possible trojan programmer.... maybe we see us on #xolox again and dicuss this there. :)