I don't think it can be compared to the IE/ActiveX scenario. IIRC, SL4 OOB apps can only instantiate already installed COM objects, not install new ones, unlike IE. Around the time SL4 was first unveiled, a C9 video discussed this (sorry, don't remember which one though).