Twenty something years ago, I had a friend who comes up stupid web site ideas which supposedly make him rich, each month. This is even worse than his ideas.
Sorry, I have not read all this bull... uhhm, letin. I mean bulletin.
Anyway, you are essentially right. Because of this, You (and some people like you) are the reason why I am a pastafarian for a while. I believe in our holy moly god, Flying Spaghetti Monster. Why ? Just because nobody can disprove this. So, I believe that he created the the earth and universe while being a little tipsy and I believe you would not exist if he had created earth soberly.
Create an "updatebot" user, give only necessary (filesystem) rights to it, use a daemon running under that account ? Once I wrote something like that to update about a few hundred client machine's php sources which we develop. When there was an update to send clients, i was running a script which checks out release branch sources from scm, package them and uploads to public "distribution" server. It was running fine.
Making root account accessible from internet for upgrades? You must be joking. Why cant you develop an automatic update scheme like all others ? Device should ask a public server if there is an update, notify user if there is one, download and apply it if user wants.
Is that a bad thing ? Yes, Nim is love child of pascal family (pascal,oberon,ada) languages and python mostly but has some genes from other languages too. It also supports templates, generics and AST macros... It compiles to C/C++ and Javascript so it is easy to bind these too. IMO, It is very pragmatic. Although I have not done anything serious with it yet, I really like it.
If you really like your indentation this much, give Nim, https://nim-lang.org/,a chance. It looks and feels like python but it is statically typed and compiled language at least.