Every commercial operating system, and the driver for many consumer components (especially video cards), receives - and are expected by consumers to receive - regular updates for a number of years, and requires constant attention to detect and address security flaws. For the average user, Windows is not all that much less of a SaaS than any web app at this point.