Well Sh_ee_it!
Never thought there would be a time when I was defending Windows...
First of all: Windows Update:
You can set Windows Update to download updates but let you choose whether to install them.
You can also set Windows Update to install updates on whatever day of the week you choose and at whatever time you choose (say 0300 hrs)
Windows Update releases once a month (Patch Tuesday - the second Tuesday of each month)
With an up-to-date system there are rarely more than 3-7 updates which take 10-15 minutes to install.
So bull!!!! to that.
As for locking down Windows being a PITA for some users, bull!!!! to that too unless you happen to be a dev in which case you might reasonably be expected to have Admin rights over your own machine.
At the risk of being boring, Sudo for Windows allows you excellent control for elevation of user privilege and Windows itself can be very easily tuned to be minimally intrusive for specialist users without giving them Admin rights.
I'm set up to run as a special user, with a few limited rights that the ordinary user would not have. Maybe because I'm used to Unix, but having to su to do critical things is just normal for me - just as it should be for everyone.
Od course I can login as root/Admin if I really need to, but most of the time you just plain don't - as any Unix person would tell you.
So bull!!!! to that too.
Windows can be well secured with minimal initial effort - so don't whine if you run as Admin the whole time and end up getting pwned!
Mac
