Your config seems quite secure - however there are certain points you may need to cover.
Firstly, system/data backups: I recommend you regularly create system images of known good states of your system, so that you may use the backup images to restore those exact states in case of a disaster, such as a software malfunction or malware infection.
Secondly, regarding security patches: Is there a specific reason why you have disabled this feature? (For example: People disable it to prevent the Windows 10 upgrade notification modules from installing)
Other than the above, you should be good to go.
Thanks for sharing your config with us!