When I update a device driver I download it to another machine and put it on a stick and install from that. No software is installed direct from the net.
The main PC in the studio has had the software drive cloned on another drive that sits on the shelf, if there are any issues or drive problems I can install the clone and I am up and running again. All work is saved to at least 2 drives, 1 which is removable and goes home with me.
The trick is that the Studio computer should only be a studio computer, not doing internet, games, etc.
alan.