There are legitimate cases where you need to avoid an update, if you remember a month ago when the meltdown/specter patches were pushed out some PCs did not boo

There are legitimate cases where you need to avoid an update, if you remember a month ago when the meltdown/specter patches were pushed out some PCs did not boot, if you have your scenario where everyone is forced to update then people with affected hardware can't rollback because the update will be forced again on them, the PC would be unusable until a new update fixes the bug. Similar bugs with non booting PCs, display drivers not working, other hardware not working, performance loses happened many times after updates, so you need to allow the rollback functionality to work. A solution that would help in this case is implemented in some major linux distributions where you can chose to install only the security updates, this means more work for Microsoft but if Red Hat and others can spend the time to backport security fixes to the Linux kernel then MS should be able to do the same. I am aware of the downsides of this, but enterprise customers should ask for the security fixes only and not for all the eye candy changes and if enterprise get this special security fixes then the other users should have the option to get them too, paid customers should not be forced to run on bleeding edge.