I never let anything happen that I have not agreed to manually.
Updates, defrag,... happen ONLY when I have initiated the process, am am paying attention. Updates are never allowed to be automatic.
Why: too many experiences of clients calling me to fix what was automatically accomplished over-night.
And I always install hardware updates separately, in case the need for rollback is required.
(Many examples of win updates installing bad vid drivers and printer fixes.)