Updates patch vulnerabilities (holes) in OS components that can be exploited by hackers, trojans and other nasties. The 0 day patches in fact provide protection that AVs/firewalls cant. At least the critical and important updates are necessary, optional updates can be skipped.