I think you're right.  I was nervous about the possibility of some bug leaving the user trapped with an old app cache, but the browser will independently turn off the app cache when it gets a 404 fetching the app.manifest and will load the new (uncached) code from the server on the next page load regardless of what the client app code does... so I think that's fine.