On: Microsoft disables Spectre mitigations as Intel’s patches cause instability

[ptaipale]

If your AV is not patched, the kernel patches should not be installed because you might get a repeating bluescreen.

So get a patched AV. If you haven't installed another AV, then Defender is there and counts.