While installing firmware updates today, I found myself wondering: whom am I actually trusting when I update my firmware? This surely was an important question as I didn't know where they come from in Gnome-software store (I can't simply trust flatpak or snap dealing with my firmware).

So, I researched it and found satisfactory answer putting me at peace.
Answer: the hardware manufacturers (like HP, Lenovo, Dell) of our device upload their official firmware updates directly to the Linux Vendor Firmware Service (LVFS) repositories. Now our linux systems have a 'fwupd' service running in background that pulls the info about if there is any updates matching your exact machine. Gnome software presents it at the table in a fancy manner.

This snippet confirms the fwupd process is running in background, and keeping it running is one of the easiest ways to protect your system. Installing updates early patches critical security vulnerabilities and ensures you get the latest features.

Many people hesitate to update because they worry it will take up too much storage space. However, updates don't always mean bulkier software. In fact, clean code updates often optimize the system, resulting in a smaller file size and faster performance than the previous version.

So, what's your next step when you see a new firmware update notification on your system:
A. Download immediately.
B. Read details online first.
C. Wait to see if anyone has issues.