Which is less secure: turning off updates and potentially falling victim to zero day in the wild, or turning on updates and having Microsoft install arbitrary c

Which is less secure: turning off updates and potentially falling victim to zero day in the wild, or turning on updates and having Microsoft install arbitrary crapware on your computer without your explicit consent?