It doesn't have to be this way. ThreatLocker Patch Management

Summary from the TLDR InfoSec newsletter

identifies outdated applications and handles everything for you.