> But each software doing that has to run with the privileges to update itself. Which is in my book a big security downside.

But it does not have to run with those privileges under normal circumstances. It's easy enough to elevate privileges just for the update step.