The fun part is that they used commits specifically for security, but then add an auto-updater. Might as well use tags.