Also maybe I'm retarded but shouldn't the update invalidate all LN backend auth and regenerate it automatically instead of leaving people with potentially exposed macaroons etc?
Sure it might break stuff but a simple post update popup with info would help less technical folk.