We aren’t talking malware here...MS thinks its update is perfectly legitimate and doesn’t hide its content or its delivery method.
The utility writer can and will update it if needed.
[[MS thinks its update is perfectly legitimate]]
Malware!