Administrators of managed infrastructures might want this feature to prevent users to change / corrupt configuration of a client intstallation.
This is requested in non-managed environments as well, making this more tricky. Using the client customizer is probably a requirement in that case.
https://community.thinlinc.com/t/disable-updates/517