i tend to two defenses
o if it is not an urgent update, i wait to hear from peers that
it is safe.
o i generally do not accept pop-up updates. if one looks tasty,
when possible i navigate directly to the site (yes, i know about
dns spoofing) and download.
randy