I used to work in a rigid multinational with an IT department that mandated only approved applications and screened any updates as safe for integration with the standard office suite before release. Wtf happened and why is it now ok to let systems auto update by a third party?