Why not just lock your versions entirely? No need to always have the shiny new version.
Yes, you can! Time-lock registry is an additional method of defense.