Control over individual updates was abandonded halfway through Windows 7, when they found out their algorithm for evaluating updates is exponential and has trouble finishing within 24 hours. So they moved to a linear sequence of all-or-nothing bundles and diffs.
They used to offer two tracks of those: everything and security-only. I don't think they do that anymore either.
You can uninstall individual updates after the fact. Not sure this actually works to any useful degree.
White-collar crimes. No mandatory minimums on any of those.