Unless windows update needs to check for something every few seconds… It’s not that. This is behaving more like real time streaming of events, constantly sending to Microsoft, to a domain called events.
Probably sends what the user is doing all the time.