Further digging...I am completely baffled. I have a web security appliance (Ironport) which is part of my lab that I send all my network traffic through for filtering so that the kids don't see the stuff I don't want them to see and I don't get malicious software on any of my computers.
Well, looking through that I see this over the last week that she has been here:
Whiskey Tango Foxtrot!
that's over 20GB it's been trying to download in updates.
Today's value was over 8GB!
So I exclude it from the web security appliance and now it is acting 'normal'.
I hate W10 so much...