What does this have to do with redirection attacks? And who says the updates aren't signed? I would be a bit surprised if they weren't.

Based on the info in the post, I'd guess that this is a test update of some sort and that it was pushed by mistake.

Disclosure: MSFT employee, but no knowledge of what this is about.