dex-update

SUSPICIOUS: the core update behavior fits the stated purpose, but the footprint is broader than a simple updater. Automatically executing freshly pulled scripts, running package installs, modifying live config, and silently enabling background automations create a high trust burden and elevated security risk even without clear evidence of credential theft or overt malware.