Yes, having unpatched Windows and accessing the Internet is a bad combination. If you are concerned about the Win10 update (which caused me to leave Windows entirely), then I recommend that you download and run Never 10, which disables Win10 updates and then at least apply Windows Critical (security) updates.