This is definitely a issue of communication, because people are just so tired of their information being stolen that generic tags to do a feature has everyone on high alert.

The plugin being open source and the dev responding to questions and criticism is what saved it. If a popup for the update happened before its update to explain what it actually does, I feel this would have been avoided.