In this case it wasn’t an update to the OS but an update to something running on the OS supplied by an unrelated vendor.
But if we entertain the idea that another OS would not need CrowdStrike or anything else that required updates to begin with, I have doubts. Even your CPU needs microcode updates nowadays.
There's a number of minimal operating systems without all bells and whistles. The reason they aren't as popular choice is the "OS doesn't matter".
If OS is minimal it doesn't need OTA updates, let alone from a third party...