[chii]

> bundle all changes in "required security updates."

And that is why i have setup a managed organization setting in windows to stop automatic updates (which includes security updates). I manually vet each individual security update, and download and apply them myself. I don't let windows update on its own.

Similarly to android. I don't let it update, unless i know i need the update. And i'd like to do the same with apps too, but companies have put in things to prevent people like me - deprecating old versions and forcing users to use newer versions (things like whatsapp, or youtube are prime examples).