In my day, we almost never allow something from a vendor to be pushed out into our production systems or networks before we had first tried it out or tested it, verified it ourselves to ensure it didn't create havoc like we saw.