In cases where customers can’t install or run antivirus software, Microsoft recommends manually setting the registry key as described below in order to receive

In cases where customers can’t install or run antivirus software, Microsoft recommends manually setting the registry key as described below in order to receive the January 2018 security updates. There's a compatibility problem between some AV products and Windows, so unless you jump through hoops, they won't deploy security updates to systems that don't have any such products installed? How does that make any sense at all?