Be aware that starting with February 2015 CU SharePoint Product Updates including non-security product updates will be made available via Windows Update.
E.g. for February CU the following fixes are offered through windows update for SharePoint 2013:
The fixes shipped using windows update are the individual package release in a given CU. The fixes I link to in my blog posts are the server or "Uber" packages. See my article on SharePoint patching demystified for details.
What does this mean:
- If you have windows update enabled or WSUS configured to push SharePoint fixes automatically to your SharePoint farms it will guarantee that your SharePoint servers will always be up-to-date. The only thing you need to plan is to run PSConfig from time to time to ensure that not only the binaries or your box but also the SharePoint databases get updated.
A caveat is that evaluating the fix in a test environment before applying it on the production farm will be more complicated.
- If you have windows update disabled nothing changes. You can plan the installation of the CU to be installed and evaluate it. In this case I would encourage you to install the "Uber" packages I list in my blog posts as it ensures that all components are at the same patch level.
- As always you should ensure to install the security related fixes as soon as possible.