Been in it since the web was a thing. I agree wholeheartedly. If people don’t run auto updates and newbies will not run manual updates, You’re just teaching them how to make vulnerabilities.

Let them learn how to fix an automatic update failure rather than how to recover from ransomware. No contest here.