That's not really the problem here.
The problem is allowing a single vendor, with a reputation of fucking up over and over again, to push code into your production systems at will with no testing on your part.
The problem is allowing a single vendor, with a reputation of fucking up over and over again, to push code into your production systems at will with no testing on your part.
But no, they are okay with a black box that calls home and they give it kernel access to their machines. What?
(I am operations management and fought against this product and approach for months)