the MB - BIOS should have the ability to not allow any auto updates (disable updates), or just password protect the BIOS is another option (don't forget the password, if it is a firmware level lock you will need it)
--> malware has been known to do "bad things to BIOS" .... that is why you want updates to BIOS disabled
News to me that Microsoft is pushing BIOS updates; though I've seen them "push you to update your BIOS, to stop malware"
you have to wonder if these laptops have some BIOS setting for "auto update" .... seems to be mostly laptop users complaining, as far as my web search showed