In development environments, it's critical to be able to set a specific version to applications, which cannot be upgraded further.
It's mostly used for browsers and infrastructure (For example, smbclient for domain-binding changed its tags and broke processes).
Setting up version lock for all packages (not just excluded windows updates) will allow for stable systems.