I have set my Automatic Update settings to "Notify me but don't automatically download or install updates." I think this allows to be able to think about whether or not one wants to download and install these critical updates.
I changed it from the default which was "Download updates for me, but let me choose when to install them. This is in the new settings for the new version of Windows Updates which came out this morning.