Comment by korijn

It's usually a company-specific interpretation of software validation requirements (imposed by regulators) that software cannot be changed (ie updated) outside of the company's control. Web apps are fine as long as the company can host and perform upgrades/maintenance themselves.