Yes you are correct. But some people may have their PC's set to automatic, and may not be part of a Policy, or even have their updates going through WSUS (like in small orginations). So the you don't want IE7 installed on peoples PC's, you run the block tool on those PC's. This way, they can still get all their other automatic updates, but wont get IE7.