It continues to lack real mandatory access control, for starters. You can deny system apps permissions and Windows update will just quietly revert them. It has a hidden “user” which cannot be restricted.