Referring earlier e-mail. An app matrix with every update downloadable by ticking a checkbox would be possible.
You could let us download an entire batch of updates into one .deb file that is checksummed and signed. You could also let us download several app updates as a checksummed and signed as a zipped file. A feature blocking all incoming and outgoinf traffic requests per application would be great (littlesnitch). All automatic updates should easily be turned off.