sadly, our users take “compliance training” with software that is flash dependent. I’ve just started using Windows Packaging Publisher via WSUS to start pushing Flash updates/patches to about 1000 endpoints. We don’t have SCCM.
Even if you had sccm you should need Shavlik to push flash or Java updates via windows updates. It’s pretty slick