Hmm, I've been using WSUS to update CC3 workstations, member servers and CC3 DC's for a couple of years now. The only thing I found was the RM Password Manager software only works with .NET version 2.
Generally it's all working well though, planning on finally replacing with some new DC's this summer though