There are Defender updates most everyday and it's normal as new virus' appear almost everyday. To upgrade to 11 you have to chose it and your machine has to be capable. It won't update to 11 on it's own. The periodic 10 updates are normal too.
I said it before in the W11 thread>
I dont recommend anyone to install W11 unless he is out of his mind or are 100% business computer, W11 is fully based on DRM or Digital Rights Management, It will control all your PC resources and all the activities you do on your PC such as the number of times you can watch a video, listen to music, open an installed program, open a PDF file, open an image, view a photo etc all based on DRM.
The TPM will not allow you to install a program without a valid certificate or an expired certificate. This TPM hardware is a chip that has been placed in every PC since 2006 dormant and now in W11 this inactive chip will be activated.
On W11 only TPM can communicate with CPU, HD, RAM memory, peripherals, led monitors etc etc... the TPM also will manage the certificates of the websites your internet browser visits via https to not allow you surf the internet on ''unsafe'' sites and TPM may also block your PC or Server or your hard drive if it is considered ''unsafe'', as is already done with any smartphone and still there is IPv6 to find you.
They already tried do the DRM/TPM thing in the past, it was called Palladium software, initially it appeared in Windows Vista and was removed due protests from users and the Microsoft community, now in W11 it came back renamed to TPM and is built into the motherboard hardware as a chip.
The TPM chip has been installed silently on all motherboards since 2006 if I remember well.