The update that Windows issued in March (can't remember the number) was engineered to protect pcs from ransomeware, even XP. Those that did not manually or automatically install this update were/are at increased risk for WannaCry and other forms of ransomeware, so I disagree that the "important" monthly updates from Microsoft are optional. The updates with the word "security", that is.