I remember working in environments where management had decreed that we would not install updates ever. . .

That’s…definitely a decision that puts a lot of trust in Microsoft’s security. Lol

It was a very different time. Security was still something that happened mostly at the network perimeter, and even then not much. Routers without firewalls were very common and things like SQLSlammer were much more possible.