When you run the media creation tool you get the latest biannual build. If it has been a few months you promptly also get a cumulative update that addresses all of the stuff broken and/or insecure in that build. Is there a good reason that biannual builds are not upgraded directly so that when someone uses the media creation tool they get the latest patches pre-integrated? It seems that in doing so MS could reduce bandwidth (build + updates is larger than patched build) and people could start fresh with serious security holes patched on their first trip to the web. I assume there is a good reason for not doing this and I am curious if anyone here knows why.