On an OEM Windows install on a Dell XPS 13, when I navigate to the Dell support website, it offers to download and install updates (even firmware updates!) on the spot, in the browser, flaunting all the usual sandboxing. This is Firefox which, to my knowledge, doesn't support any mechanism like ActiveX to make this possible.
How does it work? Is Dell injecting a backdoor into Firefox? Could a malicious website use this "feature" to cause damage?