[ChuckMcM]

In the wannacry event the policy of not applying updates was contributory to its spread. So 'not forcing them' being the less good choice.