I agree with your recommendation with the exception of those programs that won't handle it. We had one at a previous site that wouldn't work unless we excepted it from the list. Fortunately the vendor was quick to provide and updated version, but we had many desktops to update after that.