not being able to disable updates IS a threat vector
having to play games like not using wifi is not a suitable method. it needs to be a user-controlled switch without any gimmicks to access

further, all updates shold present a changelog first and allow picking what the user wants and blacklisting others.

too hard? fuck you devs. too bad, you brought it to this