Presumably, they are people with at least a modicum of understanding of security. Enabling auto-updates (or, better, controlled pushes of updates via your IT f

Presumably, they are people with at least a modicum of understanding of security. Enabling auto-updates (or, better, controlled pushes of updates via your IT folks) is absolute bare-bones minimum-you-can-do security. Otherwise, those laptops are all collections of well-known security holes.