[panarky]

I set network connections as "metered" since updates are disabled over metered connections.

When I'm ready to update, I switch to a non-metered connection.

[bluehazed]

This is really the only sane workaround. Unfortunately you have to set wired connections as metered through regedit (afaik).