If you set your connection to a Metered connection it won’t ever download updates, though that’s not the primary use, it works. you can let it download when you want. Also, you can set it to not restart automatically when it does updates in the case that it might happen at a bad time. Though of course setting all these options and privacy settings isn’t easy. For example, with MacOS it has a page with checkboxes that you see that asks what to allow. Windows 10 it has something similar, but you have to navigate to that page which most people won’t do which leaves many default options on. I would definitely fault Microsoft for that, because they can claim that the options are there while it’s in their best interest for people not to be able to change them easily.