Security and antivirus protection exist as much to protect others as oneself, much like vaccines. I wonder whether Microsoft considers updates to be protecting the users of a specific machine from a virus, or the community at large from many machines having that virus?
The problem is, security updates should stick to security, and should be clearly separated from feature updates - especially from the ones that remove features.
