Fully agree.  Unless I can do the update without being connected to the internet, it's 100% irresponsible to expose my clients' data because I have to disable security protections (and contrary to our Written Information Security Plan, mandated by law, as well).  I can understand this happening 20 years ago; in modern times it's unacceptable.

(Incidentally, I'm not sure which version number I was updating to or from, but it's on Windows 10 -- not limited to Windows 11, as was mentioned in the original post.)