An unpatched exploit is independent from applying an update. Serious exploits should be patched asap because they may endanger critical infrastructure. But I as the system administrator should be able to make the informed decision not to apply the update for my own reasons. Even windows 10 PROFESSIONAL doesn't allow this. It's a huge screwup on MS part.