Well, I can answer that, I always do updates offline even in Windows 10 and so the Windows Update service is set to disabled.
Portable Update will of course start it and so I have to disable it again once it is finished, but it gives me the option of select which updates to install.
There are roughly two types of ordinary updates - Feature and Security. While I really do not care about the first too much as most is disabled anyway, the latter is important to not get infected due to a security hole in the operating system.
They did check AV applications against security holes a few years back, and none of them did catch any exploits as such security holes are the domain of the developer, iow Microsoft.
In other words, I read knowledge base information for each KB number, unpack suspicious updates manually to see what is included and what changes it does.
Then I apply the needed ones only and let the shit be as I really don't need any updates to telemetry and so on, still I am concerned about security.
That is why I bother with updates and my clear advice is that so should you, for your own safety :flower: