To be fair, critical security patches for Windows are often delivered out of band (not on patch Tuesday). And malware definitions for Defender are daily.

Not trying to defend Microsoft entirely, but not everything is delayed until their monthly update schedule.