The problem Microsoft has created is that you now have to choose between trusting their updates and having a chance of your system being broken by them, or not

The problem Microsoft has created is that you now have to choose between trusting their updates and having a chance of your system being broken by them, or not trusting their updates and having a chance of your system being compromised through an unpatched vulnerability. This is a binary question with no good answer, and it's no longer clear that accepting all updates to ensure you get the security patches is the option with the lowest risk.