Just offer tiered updates? Do they do this? Anything cloud/definition based you never want to be leading edge. I remember using Symantec/Trend Micro in the late 90/early 00s as a sysadmin, and they would let you defer live updates as far out as weeks/months if you wanted to.
Live updates is extremely dangerous, and any IT system relying on it pretty much will get burned...just like we're seeing here. Microsoft dedicates a massive portion of their infrastructure to VM/physical tests for their rollouts, and STILL sees issues with rollouts!