Maybe there should be an installer applied lockout available that prevents updates. This would supersede the usual consumer addressable enable/disable update option. A mixed blessing of course, but it could convert the irate weekend house call because “my TV stopped working” into a planned, controlled maintenance event.

There should also be a “revert” option that allows full recovery from unintended “enhancements”.