having windows update running is already a compromise in some respects
I haven't run windows update in like 20 years