If you don't start the Bitcoin app in Ledger Live they don't know your xpub. So imho you can update without them knowing everything about you. Am I missing something?!
Of course, if you use their wallet, ... that's entirely your fault.