Really? I have to admit, I just don't understand the corporate "security" logic, then.

You don't update a crappy 10-year old browser full of security problems, and yet you let another piece of software (with potentially even more security problems) update itself quietly behind the scenes, totally out of your control?

... and then you actually make your enterprisey software applications depend on that piece of software, which you have little control over?

I just don't get it.