This seems to be used by Microsoft like the Windows 7 and 8.1 to Windows 10 upgrades.
Edit: it's not clear to me how much responsibility lies with 3rd party update management tool and how much with Microsoft. This update doesn't seem to automatically run by itself, but it might be misclassified so that these tools think it's a security update and just deploy like any other patch.