Welcome to the Centrify forums.
To be very clear: we make updates available to all our customers, and we even break our normal release cycle to rush fixes if any of our open source components (OpenLDAP, cURL, etc) or our own software.
We even notify those who opt-in of the availability of new software bits as well as publish in the product secutiry policies page. New releases and hotfixes are released the same day for both Express & Commercial since we have a single codebase.
Can you confirm that your issue is not with the availability/timeliness of security updates, but with the inconvenience of manually downloading the software to update your own local repo?
As always, we are willing to listen, so please, use the idea exchange and I'm sure very important people are listening to our customers via this community.
Note: anything we do should continue the goals of the program (to get new commercial customers) and due to some historical reasons, that also prevents abuse.
R.P