[amelius]

This is not guaranteed to work. At some point Apple might show you an update dialog, and you might click "yes" by mistake.

[hypothesis]

I think it requires you to enter your passcode, at least it does for me, when auto-update is disabled.