Best practices for windows updates

Hello,

I could’t find a documentation page regarding best practices for windows updates.
The only mention is in this documentation regarding several updates that can cause problems

We are running several Windows Server 2016 VMs with high density robots.
So far we have disabled automatic windows updates but I’m not really comfortable with this solution, especially for security updates.

One solution would be to test all the updates on the development/ testing environment first but that would require restesting all the robots and we have a lot of them.

Do you update your VMs ? Anyone had any problems resulting from this ?