Not a push mechanism

Just a minor point, but I don't think that these updates are 'injected' onto your PC. I thought that Windows Update made a request to an MS server, which would then supply the updates. So it doesn't provide a loophole to hackers.

Well, assuming that it's not riddled with bugs anyway.