One big issue with Lync is, IMO, the client version fragmentation.
If you run the great script from Pat Richards "Get-CsConnections" in a one or two years old Lync deployments, I bet you can see many version of PC and Mac clients. The reason could be many: the customer do not have WSUS, or maybe no one correctly manage it!
The question is: if I can centrally manage the firmware for IP Phone (LPE and 3PIP), why I cannot manage also the Lync clients (PC and Mac) updates?
The idea is simple: to load on the Lync FE the latest client updates (maybe in a .CAB format?) and let's the PC and Mac clients update itself like IP Phone do today.