It seems that some of the same arguments for mandatory vaccination of people also apply to mandatory upgrades for Windows. E.g. if an exploit is rarely open it would be more rarely attacked, thus giving the herd of Windows computers a kind of immunity, somewhat protecting computers that for whatever reason, can't be upgraded.

Is it therefore reasonable to legally mandate updates or anti virus software for popular operating systems?

Also, since operating system customizations have the potential to defeat such protection, is that valid grounds to ban unapproved changes?