No, the best thing Windows could do is make a version of Windows that works and doesn’t need patching every five seconds.
First thing I did with my last new PC, Windows 8 on it, was boot it up and turn off automatic updates. I don't trust the updates for reliability or security until someone else has used them without a problem. I've not installed a single update since I bought this one over 2 years ago (or thereabouts). Works fine.
There's a way to do that: formal verification — with which you can prove there are no security holes or bugs.
There's Ironsides, which is a small proof that it can be done and the first (to my knowledge) formally verified Domain Name Server.