Can anyone use WSUS and SCCM, or are these licensed separately, e.g. with Windows Server?
Could the US FTC require that security updates be delivered separately as a condition of sale, i.e. cannot be bundled with non-security updates? They are already studying mobile device security updates, https://www.ftc.gov/news-events/press-releases/2016/05/ftc-s...:
"In order to gain a better understanding of security in the mobile ecosystem, the Federal Trade Commission has issued orders to eight mobile device manufacturers requiring them to provide the agency with information about how they issue security updates to address vulnerabilities in smartphones, tablets, and other mobile devices. The eight companies receiving orders from the FTC are: Apple, Inc.; Blackberry Corp.; Google, Inc.; HTC America, Inc.; LG Electronics USA, Inc.; Microsoft Corp.; Motorola Mobility, LLC; and Samsung Electronics America, Inc."