[Gabriel Dufresne (GabrielDuf)]

• Resolves [ENHANCEMENT] Show/track installer url domain by default #4617 by flagging upgradable WinGet packages whose installer URL host differs between the installed and new manifest versions. An amber warning glyph appears in the Updates row before the version text; the tooltip lists the old and new host sets and explains the implication.
• New setting DisableInstallerHostChangeWarning (default off → warning shown) exposed in Settings → Updates → Update security. Implemented across both UIs in all three view modes (List, Grid/Tile, Icons).

[trollollol123]

Not sure if this useful but maybe adding a warning if the host changed in a way that looks more suspicious, like if "I" (i) was changed for "l" (L).

Example:
Installer host changed since the installed version.
Old: closest-dl.techpowerup.com
New: closest-dI.techpowerup.com

A change like that should raise a high-alert warning. Because looking and comparing old vs new, avg user or all users might not think much about it when it looks almost the same.