"Well I think it's obvious vendors would never reach into a customer's site and patch themselves without the customer agreeing to it in advance." But vendors seem to think it's fine to roll out firmware upgrades without customers agreeing to it in advance?