Well an organization shouldn’t be giving end users admin. That’s a recipe for disaster. From an updates perspective you can tightly control which update is applied and when.

Microsoft makes some crappy decisions but they do know who there big customers are.