Re: Easy to solve:
That is not _exactly_ true. It is a lot of work, but is doable. We are a software house and many/most have MACs. However as you said, it is a fair bit of work, but once set up it seems to be fine.
> There is no bulk installation or update mechanism, there is no centrally controlled permissions.
Apps called JAMF and PMC Policies manages this. Forces centralised policies, password rotation, OS updates.