When companies push out 'critical updates', it's rarely for the user's benefit. There's a whole process where they evaluate cost of support calls vs cost of losing customers. They expect a certain percentage of devices to fail and consider it collateral damage. Best practice? Disable automatic updates and only manually …