There are only certain classes of systems this works for. If the system generates infrequent alerts, for example, the stakeholder won't know there's an issue until they independently discover that they missed an alert. That said, I've resorted to this approach before, and it works.
And then you suddenly torpedoed security notifications for the whole company. Nobody noticed for a year that updates were not applied. The rest of the story writes itself.
