Only updates we may be concerned for are BIOS ones with our full disk encryption compatibility with Check Point. None of our systems have any HP software so we don't need updates for those. We also control updates like java, flash, and windows ones too via SCCM.
I'd wager ChristianBundy was referring to device drivers that would come from HP for things like the graphics card or CPU's built-in graphics processor. Often, these start out as an Intel chip but are then slightly modified by the laptop builder so that the base OEM drivers should no longer be used. Many times, these drivers are not distributed via Windows Update. As such, the drivers wind up out of date, continuing to use what was in the base image... sometimes the generic version included on Windows Update. This can often lead to system instability, particularly where browsers come into play on corporate systems (that's usually the most graphics intensive thing they do). Folks like Mozilla and Google maintain driver blacklists to disable hardware acceleration when one of these outdated and buggy drivers is detected (here's Mozilla's: https://wiki.mozilla.org/Blocklisting/Blocked_Graphics_Drive... ). So, the browser will run a bit slower. More importantly, text won't render anywhere near as well... approaching unreadability on some sites.