I've never had WinXP force-install anything, UNLESS I have update ootions set to allow it. Which I don't.
I always turn auto-update off, and then install security patches as and when they come out, and/or doesn't conflict with my usage, and other patches selectively. The difference is I know enough to be proactive about it, and am disciplined enough to actually do it.