[angry_octet]

It is pretty easy to prevent chrome auto-updates with a firewall rule and by configuration (https://www.chromium.org/administrators/turning-off-auto-upd...).

But unless you audited the chrome code (with a team of 1000 experts) you have already trusted them, both to write quality code and to prevent malicious code sneaking in. Why not trust them to patch your browser against malware?

Feel free to contribute to ungoogled chromium: https://github.com/Eloston/ungoogled-chromium