Just a idea, but support could be a reason to pick a 3rd party to manage these kinds of devices instead of installing the original project. You do open up extra

Just a idea, but support could be a reason to pick a 3rd party to manage these kinds of devices instead of installing the original project. You do open up extra avenues of compromise, but rolling out an OS project you are not really an expert in to staff is a big risk for usability. I can see a value proposition of "locked down devices, more secure than stock, 98% as secure as possible, 24/7 support" being an attractive tradeoff for some companies or people.