The point is, in order to get security updates delivered via windows update the user would have to have installed SP3 as for many that is a prerequisite to getting some updates.