You're giving a third-party company remote admin access to all your systems (by their ability to push their own code updates to your systems).