It has come down to the point that if you want to protect your Windows 7 investment, you are going to need to bar the door. The only way I have found to do that is to set Windows Updates to NEVER. Then at your convenience, manually start it, and uncheck the ones you do not want, allowing what are probably worthwhile updates to be installed.
The challenge will be somehow keeping track of the objectionable ones.