At a previous airline, after some IT-induced EFB shenigans like this which affected flight safety, IT was banned from making any unilateral changes to EFBs. All changes had to be beta-tested by designated pilots (who had access to un-tampered EFBs if needed), and approved by the LCA group before roll-out. That included OS updates and patches too. Priority was flight safety, not pathological IT crowd control urges.

Once IT was put back in their box, the biggest threat to EFB reliability was pilots installing and using other software.