Many Windows users are not well informed about security issues.
Security updates and driver updates should be automatically delivered & installed. In the case where the user is competent and understands security issues they know enough to turn off updates and other features (windows firewall, WGA, malicious software removal tool, . . . ) that are unnecessary or unwanted.
It is good for users to be protected by default.