Those are excellent rules; I have used them myself to good effect. And in my comments over the past years here, you'll see that I've recommended those rules, especially to those folks who prefer to not install updates. There's no law saying you have to do anything regarding updates, but prudence dictates caution if one chooses to operate with compromised security.
The larger issue is that a ton of Windows users:
you can’t cure stupid, but you can make backups