Thank you for this. Severely limited controls are certainly better than no controls. Looks like timer can reduce breakages to no more than monthly, hold can prevent breakages for up to 3 months, and metered seems like it may be able to disable updates and subsequent breakages if I can figure how to trick the OS into thinking I'm always on a metered connection (which is actually true, but I'm on LTE via wifi)