[GiovanniFrigo]

I get your point here, but since the bundled Chromium version is compiled by ourselves we do not rely on an external toolset, allowing us to support just one version at a time. If you're intrested, we use Sparkle (http://sparkle-project.org/) to deliver remote software updates.

[creshal]

> allowing us to support just one version at a time.

On the flipside, each program has to maintain the whole stack themselves, and have to push out security updates if necessary. I'm not sure this is an improvement over Java's security situation…

[mpitt]

I see it like this: 1) let the user handle the security updates of the JVM; 2) push out security updates in a centralised, controlled fashion.

IMHO, in a corporate solution like that described in the OP, 2) makes a lot more sense.

[leolanzinger]

didn't get your point honestly