Thanks for the useful gen about actually achieving the update, AD.
They seem to be a little more willing to provide patches for really serious stuff on older OSes than they used to be. I noticed a recent update was made available going back to Windows XP.
I've not updated Windows 7 for ages - since they were due to adopt the "roll up" approach, dishing out a month's patches en masse rather than individually. I'd honestly rather know just what each update includes - in order to exclude any "telemetry" and similar villainy crawling aboard.
As a result, my W7 machines are most definitely not to be trusted...