You don't update a crappy 10-year old browser full of security problems, and yet you let another piece of software (with potentially even more security problems) update itself quietly behind the scenes, totally out of your control?
... and then you actually make your enterprisey software applications depend on that piece of software, which you have little control over?
I just don't get it.
It's no longer that much of an issue though. IE6 is starting to die off in the enterprise space. Once apps get on IE7 they're easier to upgrade thanks to microsoft's backwards compat support in newer IE's. I'm hopeful that IE9 will get adopted more quickly than IE7 and IE8 did.
Flash updates are still a problem unless you use Chrome.