At least she asks.

I'd just tell her to never install any offered updates. Then set her computer to automatically apply Microsoft updates and log in remotely every once in a while to check for other stuff.