I feel like cabal update should not be part of the setup. This is because cabal update will do project specific work and sometimes fail because of problems specific to the project.

For example:

Aside from this, the project may want to do cabal update after configuring the project, which duplicates work.