[zoeysmithe]

Its not, instead you should install security updates in a timely fashion. People blocking windows update and being left super vulnerable isn't the solution. This bug was from an august update that affected some people. I think people are overplaying this to justify a dangerous 'dont fix if not broken.' No, your system is broken if its vulnerable.

[QuadrupleA]

Unfortunately companies use the "security boogeyman" to push ever-increasing ads, telemetry, performance degradation, features you probably don't want that disrupt your workflow and muscle memory, breaking API changes to libraries, etc.

If you could sign a contract with e.g. Microsoft (or hell, NPM) to only receive updates that explicitly fix bugs and security holes, that'd be amazing - but I've rarely if ever seen it.

[deltoidmaximus]

During the early XP days Windows had granular updates where you could decline everything but security updates if you wanted. Even when they pushed out the Windows Genuine Advantage update (Which offered a user no genuine advantages at all, just possibly hassles) you could still decline it.

[ryandrake]

Exactly--if I could guarantee that I was getting just security updates and bug fixes, I'd be happy to turn on automatic Windows updates (and application updates too, for that matter).

[DANmode]

Unfortunately it’s not just a boogeyman. That’s why it’s worked so well historically.

You are less secure if you wave off years of security patches.

[Telaneo]

If the choice is between being broken behind the scenes and broken in your face, it's no wonder people pick the former.

If Microsoft and the like really cared about security, they'd push security completely separately from feature updates, allowing people to get the benefit of updates, without the negatives of those update breaking their environment.

Or better yet, not push updates that break that break their environment in the first place. Security is a nice excuse for Microsoft to get you to update, but it's been used so many times to push hostile experiences to users that I can't blame the users for not wanting to be burned. The fault lies entirely with Microsoft and other companies for pushing hostile changes and chipping away at their goodwill.

It hurts, Microsoft. Why are you doing this to us? (It's money. It's always money.)

[DANmode]

because we all continue showing back up for it, yes.