Former Senior Windows SysAdmin here --worked in large scale infrastructures and was the lead in a team dedicated to securing hundreds/thousands of servers.

My answer: No f*ing way.

I've seen too many times that pattern of "oh we fixed this security flaw on a patch tuesday only to realize it opened a backdoor in some other way". Securing Windows boxes is a pointless rat race. They have backdoors in them, guaranteed.