A couple of years ago, I would agree with you, considering the fact that enterprise customers with volume licenses and huge investments in Microsoft infrastruct

A couple of years ago, I would agree with you, considering the fact that enterprise customers with volume licenses and huge investments in Microsoft infrastructure are bread and butter for Microsoft, and the foundation of that is trust between those enterprise customers with platinum support contracts and Microsoft. But nowadays I don't know. Microsoft is moving to Azure and 'freemium' data-collecting based business so fast, and breaking so many things. Anyway, the 'disallow all, allow only Firefox' have additional benefits in that it's prevents any 3rd party software from phoning home or something worse. The obvious downside might be the inability of those 3rd party software to auto-update itself.