So experience tells you a sizable percentage of the player base does not care about updating mods. This is not because they are ignorant, but because they don't want to deal with maintaining a complex environment - once it works, touching it again could break things. It's a game, not a job. If they don't want to update because it's too much work, that's a valid complaint. If they then go and complain about some exploit fixed in a later version, you have valid grounds to ignore them. It's not a reason to try to nudge people to update the mod by putting an unblockable popup in front of their faces.
As I have said countless times, it is impossible to ignore them when they exist in this great of a number - and are as loud as they are - and the rumors some of them spread that do real damage. Just last week I had another mod developer angrily demanding to know why I was still shipping their API...because the person reporting it was using a version 8 months old. I am bracing for the day that someone really big comes raging at me because of a certain major inter-mod exploit I fixed last July but still see reported daily.
Also, what do I do about people hiding (or worse, falsifying, which has happened, and one instance of which wasted 6 hours of my time chasing an elusive bug I fixed in November) their versions, knowing that anything other than the latest will be summarily rejected?
Given the amount of spy agencies out there, it's entirely possible somebody is logging. And even if it isn't, I shouldn't have to care about this threat model at all.
When I log into a single player game (which Minecraft in a single player world is), nothing should be making HTTP requests unless I request it. What information are you even syncing? Do you really need to be doing that syncing? If not, you shouldn't be doing so without permission. But seriously, what information are your mods sending to servers?
OK, you know what? Remove my mods right now. They send packets, so they are sending data to and from your IP every time a whole bunch of things occur, and could theoretically be tapped. Oh wait, you might want to also remove all the other mods. Oh wait, vMC itself sends tons of packets every time anything worth noting happens. Oh wait, your posting
here sent your IP to a server.
...See the problem?
If you want 100% security, you need to live in a cave in Antarctica.
EDIT: but I shall now withdraw from this thread again because it(like Stupid Things) has become a Reika circle jerk.
...Seven people hating on me, and at the time of you posting,
none in defense and it counts as a "Reika circle jerk"....
What is neutral then? A thread dedicated to why I am the antichrist (which, by the way, someone called me today)?
[That is, of course, a joke, before someone goes off to accuse me of a strawman argument.]
Maybe add it so that it only shows once per update?
I can probably do that, but, now the million dollar question:
Is that going to satisfy anyone complaining here?
Honestly, even if I added the config to turn it off globally, I will still have people complaining - many people have told me this explicitly - and even if I remove it entirely, I find it not unreasonable to imagine now people flipping out about how I "do not care about packs" when I refuse 99.9% of bug reports from 99.9% of packs because they are not using the latest version.