![](https://lemmy.world/pictrs/image/f7d636b7-6f4e-49ce-8067-3ccaa7e1d0c6.png)
![](https://lemmy.world/pictrs/image/4271bdc6-5114-4749-a5a9-afbc82a99c78.png)
They update on two Tuesdays a month, and have done that at least since XP. Even with the most reboot-keen settings, the update doesn’t happen until the time of day you’re least likely to be using the machine based on when you typically do it. It tells you when that time will be and gives you several hours of notice with a popup with the option to delay. Depending on the variant of Windows you’re using, you have settings to delay a forced reboot for up to a week (Home), a month (Pro) or forever (Enterprise). Obviously, that’s not enough to make sure no one ever gets updates forced on them when they don’t want them, and it would be nice if there was a way to distinguish users who know what they’re doing from users who don’t so people who do could be given more power to control if and when they install updates, but it is enough to ensure that checking the equipment before you use it is enough, potentially two weeks in advance.
They tried. UWP and the Windows Store did loads to boost security and make the source of apps verifiable, but people hated it and barely used it, so the holes they were supposed to patch stayed open. The store itself did have the problem that part of its raison d’être was to try and take a cut of the sales of all software for Windows, like Apple do for iOS, and UWP made certain things a pain or impossible (sometimes because they were inherently insecure), but UWP wasn’t tied to the store and did improve even though it’s barely used.