Yes, this is something I've been thinking about.

I think there are still some ways to stop automatic updates.

The other option is to take local snapshots and then do planned Windows updates.

I plan to have a backup / seed witness soon.