Which actually sounds kind of OK to me. There are some users who can't manage their own machines and don't want to. There's a reason most companies have a central IT department.

The problem is twofold:

1. There should be a single checkbox that says "keep your grubby mitts off my machine." As it is now, users must proactively keep Microsoft out. Even then updates can give Microsoft the keys again.

2. Microsoft cannot be trusted to work in the user's interest. They always steer the user towards Microsoft products.