A few days ago, I installed a fresh OEM license of Windows 7 SP1 that I had purchased last year, on top of a brand new assembled computer (intel skylake). The first thing I did is go to Windows control panel and disable Windows updates. I am done.

I could live with Windows XP with no anti-virus and Windows update disabled (of course I did not use Internet Explorer for many years, thereby eliminating the biggest threat). I can certainly live with Windows 7 with no anti-virus and Windows update disabled as well, given that Windows 7 is tighter control for the user as to what application is allowed to run. I am confident I will never have to download anything from the Microsoft website. It is what I would call a safe and healthy computer for times to come.