Could always attempt firmware updates from within a Windows VM but I suspect your mileage may vary and there’s always the risk of bricking a device when updating firmware (and a VM may increase that risk, I don’t know).
I would echo the suggestion of others, simply add a second drive, don’t dual boot, just change the target device for boot in the UEFI settings when you need to load windows. Also, I wouldn’t bother buying windows if you will only boot it for firmware updates and that’s it — waste of money — and with what MS is doing with windows as of late (ads, Recall, etc), I have personally dumped windows altogether.