Not trusting vendors is part of the job. IT departments will typically turn off automatic updates from vendors, and instead role them out in an automated way that they control.

If they are too slow in doing that, then they are doing it wrong sure. But Microsoft updates do brick computers, undo obscure enterprisy settings, or role out unevenly across your estate so people are on different versions. You want to see if that happens to someone else before you roll out.

This is even more true with windows based servers, where you'd probably want to switch in an alternative or do everything at 3am on Saturday morning.