When I dealt with them several years ago, their attitude was that they didn't give a s**t.
"Patching? That's your problem."
"Security? That's your problem."
In the industry I was in, they supplied the kiosk, the OS, and the platform, and managed app deployment on the kiosk platform. But they then insisted that the OS wasn't their responsibility...