I understand keeping ESET products up-to-date is very important, but why not leave it up to the customers who pay for your products to decide when to update their devices? I always keep my products patched, but I decide when to apply them and schedule reboots. I don't like it that you apply the updates without admin approval and when I login to ESET PROTECT, I find red alerts all of my devices. What if you push out an update and two hours later, you find it causes a major problem? You also said that you have an opt out policy, but I don't think you do. If you did, you would allow customers to permanently disable auto updates and manage them on their own. If some customers want to keep your auto update policy enabled, that's fine, but you should allow customers the choice to do enable it or keep it disabled without having to worry about it re-enabling.
