I don't think MS said it was bundled in the kernel, but it is true that parts of IE are tied into the OS (or at least used to be) in the form of mshtml and jscript.
Actually you could, as long as that browser used the Trident engine. Microsoft could have easily shipped a dedicated update application that's just a simple "browser" locked to the windows update website.
