Control over individual updates was abandonded halfway through Windows 7, when they found out their algorithm for evaluating updates is exponential and has trouble finishing within 24 hours. So they moved to a linear sequence of all-or-nothing bundles and diffs.

They used to offer two tracks of those: everything and security-only. I don’t think they do that anymore either.

You can uninstall individual updates after the fact. Not sure this actually works to any useful degree.

authorities have stated that they do not expect Cecot’s prisoners to ever be released

Innocence, joining a gang inside, survival don’t matter. It’s an extermination camp barely disguised.