meetdilip there are different ways of updating. Off-site systems, taking infinitewp for example, take direct control of the complete installation running arbitrary commands through an inside proxy I guess. Bazaar runs only composer actions and if we do run updates from outside we will only allow specific limited actions and implement very strong authorization (currently we use oauth2 principles).
@Kyrne my apologies for hijacking this track.