Maybe you don’t recall how bad botnets were before updates become harder to avoid.

I’d support optional updates if network access is disabled, maybe by your ISP.