These are valid points but for :
Even more great would be if one could authorize only newest version of any software, for example Java only with newest patch detected in network.
I would recommend creating a custom report, this will give you more flexibility in choosing software,operating system, file version, ...