Dana posted last week about Microsoft's new Security Update CD. It appears to be one of the deployment mechanisms being considered for the upcoming Service Pack 2.
This is a welcome change from the current download-only patching mechanisms. Downloading a 300MB service pack over a modem connection is not something users are looking forward to. And I know that has long been a defense users offer up when charged with being lazy about patching.
I would love to see Microsoft offer updated CDs on a quarterly basis to anyone who wants them.