The reason for turning off updates is (I believe) rarely that one doesn't want important security updates. Just as Ubuntu servers have an option to automatically install critical security updates and for the rest you run `apt-get` when you want, the same should be available on windows.

Blaming the users is nice and easy, but Microsoft definitely deserves half of the blame (if not more).