It's not that updates are necessarily bad.

It's when they try to launder in a bunch of "feature" updates (i.e. more spyware, more crapware) with needed security updates.

They force the user to make a decision: Do I skip this update and avoid having new "features" from crippling my machine, or do I download the update to prevent my machine from being hacked?

If vendors really gaf, they would make is so that you could download needed security updates w/o the rest of the garbage. But then they couldn't force more malware on you.