“…To ensure that running such firmware does not expose users to security risks, we advocate the decoupling of security, privacy and feature updates [62], such that security patches can be applied without re-requesting consent, because nothing is changed in the way the data are handled. While this adds some new requirements to the design of systems, it is technically feasible, because there are systems in use today that already accomplish this.…”