Windows patching is the tip of the iceberg — the real exposure sits in the hundreds of third-party apps beneath the surface.