Yes and no. They'll throw a big wad of cash at some provider to get some badly hacked together SSO auth and endpoint monitoring solution but then release insecure garbage running on an ancient copy of android, debian or whatever.