It can be done to detach window when you open up the fall-down menu and click on the button close to the submenu nameAltering the updater to make use of https instead of present-day plaintext http could well be excellent and simple initial step. It is really nice bonus if it also checks new exe's signature, but in to start with position, it mustn't