The special sauce is probably WSUS, which allows them to control the update process for everyone and determine which updates they get and which they don't. Additionally, the WSUS channel for updates is behind Microsoft's normal updates, which allows for them to prevent problematic updates from reaching WSUS servers in the first place. Of course, home users get none of this.
I personally believe it is arrogance to say that non-technical users shouldn't be allowed to control their own PCs. And besides, a lot of users of PCs at home are technical. So I strenuously disagree with you.