My personal opinion is that Windows Updates should be set to "off", or possibly to just "notify only".
Of course, one must then make the investment in time and effort to manually carry out the update process - including evaluating if patches are appropriate etc.
I do this at the beginning of each month - and if I am aware of any "high priority" security patches.
SD