[bug fix?] whitelist some Microsoft default processes

I have noticed that bdservicehost service consumes a lot of resources when a Windows update is downloaded and installed. I wonder if it's possible to whitelist downloads coming from Windows update or MS365 update or any trustworthy publisher so we won't have a 20+% of CPU utilization for downloading an update from Microsoft.