Shutdown requests should be observed when staging an update in nsUpdateDriver.cpp and if a shutdown request is received the staging of the update should be cancelled and the update should fallback to regular updating by setting the request to pending or pending-service. I'm not sure if the existing stage directory should be removed at the same time or if the updater should remove it.