Even if there are knobs you can turn to disable auto updates, does that cover everything that decides to change your software behind your back?
Are there misbehaving extensions with their own mechanisms?