A Windows Autopatch bug that pushed restricted drivers to some managed devices is a small-looking defect with big lessons about policy enforcement, endpoint trust, and the limits of centralized patch control.