Reply to post:

The update packages are signed by Microsoft - if they are modified in any way, they fail signature validation and get rejected. So it really doesn't matter whether you get them from the vendor, or the PC down the hall from you