No windows updates will alter any base changes of how a firewall works, and thus it is safer to run security first. Windows Updates may change certain system functionalities, but it keeps all configuration and settings that were made before the updates were thrown in. The Windows Updates also keep into account backwards compatability, and thus anything running BEFORE they are tossed in, will be running the same was after they are tossed on.