Re: "Apple demonstrates they don't have a deep appreciation of the enterprise"
If you're a company with more than a few machines you will want to make sure that security patches are installed in a timely manner, ie. in a manner that you control but reduces the surface for attacks. You can only do this with some kind of management software. Users may still have some control but if, say a week after you've approved and depoyed patches, they still haven't updated, it may be time to have a word: it's a company resource and the risks are to the company.
WSUS will at least give you information about the OS but you'll generally need something more comprehensive to include all the standard software.
Biting the hand that feeds IT
