IMHO, I haven't tried Windows 11 yet but having to disable system updates for being able to preserve user configuration says all I need to know about the quality and moral behind that OS. Also, with the due respect, unless you have other measures in place for covering security, I think disabiling system updates is a terrible choice from a user perspective.
The only attack surface I care about are web browsers thanks to JavaShit becoming a practical necessity, but fortunately those are much simpler to update compared to an entire operating system. Even Edge keeps itself updated since it handles its updates separately from Windows Update.
Everyone's threat models are different, mine simply doesn't care about most system-level vulnerabilities. I have had far more of my time and nerves wasted in the past by Windows Update compared to the supposed threats those updates protect against; the cure is worse than the disease.
