My answer's rather more basic. I want my SQL servers to be reasonably bug-free and secure. I'm not too concerned about how that's achieved. If Microsoft wanted to rebadge their last cumulative update as "Service Pack 3", I wouldn't be any the wiser, but would be just as happy. As long as I have the mechanisms I need AND those mechanisms are reasonably easy to administer, that'll do it for me.