Patch windows are risk decisions

Choosing to patch monthly rather than weekly is a decision about how long you are willing to remain exposed.

It is usually framed as an operational constraint, which obscures the trade. Longer windows mean fewer disruptions and a longer period during which published flaws are reachable. Neither answer is wrong; what is wrong is treating the schedule as a fixed fact rather than a choice somebody should be accountable for.