Are silent firmware updates acceptable to users?

Silent updates can be acceptable for urgent security fixes on idle devices if the policy was disclosed before purchase or enrollment. Feature changes, changed sensor behavior, and UI-visible differences should remain explicit. For an industrial gateway, schedule installation inside a maintenance window and keep an audit log rather than surprising operators mid-shift.