I may have dodged a bullet with Notepad++. I've been using it for ages, but it's been years since I've used the built-in updater, because I install it and keep it up-to-date with winget.

Winget isn't a proper package manager, but it's the closest you get on Windows, and downloading packages from a public repo with hashes for verification always beats relying on ad-hoc downloads. That's one of the reasons why the Linux distro packaging model is just better.