I recall that OSX used to let me select which updates, and I was always happy to explicitly allow security updates while skipping the latest versions of all the things i don't use, and also skipping unwanted OS upgrades. IMO the worst thing they did for security was making it impossible to distinguish between security patches, Garage Band releases, and UX changes.