I think you have to take a more measured approach. What I usually do is disable *automatic* updates. Then, a week (or more) after update Tuesday and all of the furor has died down, I download and install the updates manually. I just don't want to trust anyone to automatically do anything to my computer. Because if it borks up, are they going to take responsibility for it?
I'll evaluate and decide whether to take the risks, and take the responsibility for my choices. I've been bitten once about 15 years ago... and to a large extent, that was my fault, as I was hosting my own web site when code red came out and wasn't keeping up to date. It hurt, but at least it was my fault.
In this case, it hurts... but it's nothing that I did. And that's a hard pill to swallow, especially since it seems I'm now looking at several hours to restore his computer. Thankfully, nothing is lost, but it's still a pain, and a drain.