They mimic the apple application format to some degree and it is a great way to distribute. The real detriment is sandboxing but with more support this could be included.

When you say internally, do you mean behind a NAT, or something to that effect?