For Windows Server 2016/2019, we don’t need to choose which updates should be installed or discard, keep system up to date should be the best practice.
If you worry about update compatibility, you could defer update for some days via GPO or settings.
In general, we can pause update for a period of time, then only install the latest servicing stack update and cumulative update, they will make our system stable and safe.
-------------------------------------------------------------------------------------
If the Answer is helpful, please click "Accept Answer" and upvote it.
Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.