Downloaded updates often sit inert until a reboot finishes installing them, leaving you exposed in the gap. The simple habit of restarting to apply pending updates closes the window between patched-in-theory and patched-in-fact.
“A downloaded patch isn't an installed patch.”