WAC reader permission can install windows update?

in the test server, i grant my account have reader group, but i found out, i can click install update.

Is it expected?

I am using WAC 2103. Thanks