Each of the last few major updates have added more and more control over this. The latest release is allowing even more user control.
Windows already tries to track active use times for the user, and is capable of waking a machine up in the middle of the night, install updates, and then go back to sleep. Improvements to session restore makes this almost seamless.
At some point MS, as the maker of the largest consumer OS, has a responsibility to patch critical vulnerabilities. Balancing the need to keep users secure with the inconvenience of a reboot, and the feelings of lack of control that come with it, is not an easy task.
On the opposite side, I've been frequently annoyed when Windows, unable to install an update, turns my computer on in the middle of the night, fails to install, and keeps the machine on. Lovely way to waste electricity, error messages are silent, and I had to run a command line power management tool to determine why my machine was waking up every night at 1am.