fluidkey
Wallet attribute: opt-in updates
Was going through the beta and love the initiative.
One metric I would personally appreciate in the breakdown is whether the wallet forces updates on you or if you can opt-in. aka https://support.metamask.io/configure/wallet/how-to-disable-or-enable-metamask-extension-auto-updates
I agree it's an important part of a user's ability to control the software they run and trust... However, my sense is that auto-update is already mostly out of wallet developers' hands, at least in the case of browser extension wallets and mobile apps, right? Seems like all wallets of those types would automatically pass this as a criteria, since the browser/mobile OS both allow the user to set these, and the wallet developer has no control over this.
Is the idea to track these for desktop wallets? Or is it about flagging down wallets where the developer intently adds code that bricks the wallet if it's not always updated to the latest version?
Idk this depends on your thinking for a number of things.
Maybe it doesnt go into the high level score, but is a consideration shown in the more in depth description when you select a wallet.
In the end of the day, becomes a small nudge so the user thinks about it.
Its an interesting one because you want users to always be on the latest version of software to avoid bugs, but at the same time in some cases you want to limit the ability of a compromised dev being able to push a malicious version that gets auto installed to userbase and drains users' wallets.