[Dalewyn]

The only attack surface I care about are web browsers thanks to JavaShit becoming a practical necessity, but fortunately those are much simpler to update compared to an entire operating system. Even Edge keeps itself updated since it handles its updates separately from Windows Update.

Everyone's threat models are different, mine simply doesn't care about most system-level vulnerabilities. I have had far more of my time and nerves wasted in the past by Windows Update compared to the supposed threats those updates protect against; the cure is worse than the disease.