At enterprise / companies we need MSI uninstaller to be used by Microsoft group policy.
1) group-policy to do full uninstall using MSI uninstaller
2) somehow prevent user login during uninstall and notify user about delay ( = tell what is going on)
3) workstation automatic reboot follows
4) group-policy: install now missing F-secure
This would solve all problems when there is something "wrong" like when security keys have changed etc.