[Randor]

As a former member of the Windows Update software engineering team, I can say this is absolutely false. The updates are signed.

[Animats]

I know they are signed. But is that enough?

Attackers today may be willing to spend a few million dollars to access those keys.