If they aren't willing to vet, they should at least be keeping the update minimal. Ie no 'sidecar' apps.

Self signing a driver should mean just that, not a driver, and a load of other things we feel like foisting on the user.

Half the reason I moved to Linux is because I just wanted to print something without getting a load of advertising from a printer company.