Still, at least monitor Windows updates and don't allow driver installs from MS. I only ever install
important security updates and very rarely optional nonsecurity updates. If it isn't broken don't fix it.