@verovaleros @eldraco Interesting! I found that on desktop HTTP is often employed so TLS errors won't block updates (and traffic is often MitM'd anyway by perimeter security) and you can check file signatures (which eScan apprently didn't). I don't know much about MDM but this looks like a less reasonable choice on mobile.