A new vendor-neutral update layer for industrial field devices could speed patching, but it also concentrates trust in the systems that approve, package, and deliver firmware.