Elmofongo: Well this is why I have AdBlock installed
uBlock Origin has a much smaller memory footprint than AdBlock, so it may be worth it to switch.
Elmofongo: And isn't it the duty of the owners to curate the ads it displays on their websites?
A website has an ad rotation from a specific ad provider. Said ad provider does check their ads, but it takes some time, in which period the ads may or may not be displayed. Especially in the case of 0-day exploit, the ad may not be flagged as malicious until the exploit is disclosed.
If the website owner chooses their own ads, then yes, it is their fault, but few do that.
JMich: Powershell, regedit, gpedit.msc and Services already allow users to do that. The trick is not disabling automatic updates, but doing manual ones. Get WSUS or a similar program to install only the ones you want.
joelandsonja: The great thing about Windows is the amount of third party software available to solve Windows problems. =)
True, especially when they just do stuff first party software already does. The ability to download and install updates manually is included in powershell, but if one isn't aware that they can disable automatic updates on Win10, I find it best to point them towards the "one click" solution.
Do ask if you want info on how to do that with Windows' own tools though, I think I should be able to dig up the relevant MDL thread.