Push or pull is just semantics. Can you honestly say that you never ever updated anything in a Linux distro without first reading the source code, checking all the checksums etc? Be honest.