Vendor software such as Dell Command, Lenovo System Update, or HP Image Assistant directly reads the hardware configuration, offers the appropriate driver updates, and classifies them immediately (e.g., CVEs)—driver updates detected by Windows itself do not do this.
Integrating this manufacturer software into patch cycle policies to install drivers through it—or at least to retrieve the classification—would greatly simplify the decision-making process regarding whether or not to install a driver.