Of course, a lot of this is plain incompetence, but there is a security motive explaining why enterprises only support specific browser versions, even if it's a

Of course, a lot of this is plain incompetence, but there is a security motive explaining why enterprises only support specific browser versions, even if it's an irrational one. Enterprises fear people will blame them even when the browser is at fault. Celebrity's AT&T account gets hacked? "ZOMG AT&T doesn't care about its users' data." It's not entirely crazy either, when you consider how mainstream media and consumers perceive security incidents. The problem, though, is when enterprises tend to be overly conservative, not acknowledging "reasonable risk". And being out of touch with browser trends, ie assuming that only a particular version of IE is safe. (In this case, IE is probably required because the developers didn't know any better, but in other cases, an out-of-date understanding of browsers is the rationale for supporting only IE.)