You can push out registry changes as well.
Yup. There's still a lot of crap that's simply easier to manage with tools like BatchPatch, ShutUp10, etc.
I understand both sides; it's a difficult situation. Due to the complexity of modern computers, they are more vulnerable than ever to attacks. These days, your computer stores your whole life...everything you search for, order, people you communicate with, personal photos, etc. Getting hacked is a big deal. Microsoft wants to stream in updates to keep you protected (as well as make money off ads & other built-in systems). On the flip side, this makes managing network system securely very difficult. Updates break things. Updates cause delays. I was just in a meeting where the instructor was giving a Powerpoint in front of 50 people, had his Win10 laptop popup asking to do the deferred update, and he clicked the wrong button in haste & it shut down on him and started doing reboot patching. Not only embarrassing, but a huge waste of time to everyone in that training meeting. This is a ridiculous event to have happen in 2016. And how do you do big companies like financial companies, government entities, etc., where anything that goes on the computers has to be approved by an IT administrator first?
imo, what they should really do is make Windows 10 Home available for free (ad-supported) & keep the streaming updates coming in automatically, and then create a separate version of Windows 10 Pro where you can control things explicitly & have a virtualized browser to handle Internet stuff, like Ntrepid. Any files, emails, or Internet-based stuff that comes in gets audited against a worldwide database first. That's how Symantec does it with their mail filtering system, which a huge portion of corporate America uses. Although advertising is scary too, with all of the ad networks getting hacked these days. I left my browser up on Imgur the other day & it bounced me over to a cycled-in ad that had been hacked & downloaded a virus. Fortunately I was on my Chromebook, but still...it's a tricky situation.
All I know is that from an IT standpoint, Windows 10 has made my life harder & I'm resisting rolling it out as much as possible for support reasons. We get 4 more years of Win7 support from Microsoft; hopefully they'll have figured this garbage out by then. I don't see corporate America switching to Mac due to the price. Maybe Chromebooks with some sort of VDI & Terminal Server setup going on. There are some cool systems like PaperSpace coming out using NVIDIA GRID & TESLA cards & some fancy PCoIP stuff that are really promising. But as of right now, Microsoft is making some really foolish decisions for people who operate in the business world, as well as home users who are endlessly annoyed at the ads (for an OS they paid for) & unwanted reboots.