Block Windows Update on Router levels... with URL blocking... problem solved! Google it

https://www.mstoic.com/how-to-block-windows-updates-at-router-level/

If you block one update server;  there are countless other web aliases that the os can try....   and it will continue to try if there's an internet connection.... endlessly until it finds one.