I can flip that around for you: "Ah yes, the classic: the user must be in the wrong, not the organisation with a history of secretly installing an extension nobody asked for".
I can flip that around for you: "Ah yes, the classic: the user must be in the wrong, not the organisation with a history of secretly installing an extension nobody asked for".