having windows update running is already a compromise in some respects

I haven't run windows update in like 20 years