There should be no automatic updates if there are new anti-features or new permissions in comparison to the already installed version. Instead, there should be a notification that the app can not be updated automatically because of AF/permission. On the details page of an app, there should be warning / good visible field, which shows the new AF/permissions. The update then has to be manually triggered. A bit related to fdroid/fdroidclient#1606.