[wvenable]

"Bash for Windows" is pretty much Ubuntu for Windows -- you can apt-get other commands/tools.

I actually edit the registry on first install to clean stuff up. But there are the same magic elements to OS X as well if you want to get that custom. For most people, it's completely unnecessary.

As for security updates, Windows does what you tell it to do. I've always had it set to download and not install them.