Same with all Microsoft updates, but the update catalog and the updates are signed. This is because they support downloading to a corporate master updates mirro

Same with all Microsoft updates, but the update catalog and the updates are signed. This is because they support downloading to a corporate master updates mirror, and further downstream mirrors.