Patching endpoints is simple in principle, but difficult in practice. From users who refuse to reboot, to patches that break major functionality, to software that can't be patched while other software is running (looking at you, Java!), patching is fraught. When you add in the differences between research and business IT environments, the complexity of patching can spiral out of control.