@ainmosni exactly. Software of this class needs to be seen as giving the vendor unreviewed root on every system you own. If your CIO isn’t comfortable with it in those terms, a different model is needed.