The best thing a company can ever do is block downloads.oracle.com at the firewall.