What I have seen seems to contradict what all these clickbait articles you've been posting are spewing. Let's try a test. Open up Windows Update from the control panel. Go look at important updates. This screen shows you all the critical and security updates available for your computer. You will see that Win10 is not on this list. You will find it under optional updates. That means that unless you click the box to install it, or blindly just accept when your computer tells you that updates are available, it won't install.
I used to recommend that average users just let windows update install automatically. But over the last several years Microshit has released a number of updates that clearly did not go through any sort of QC testing before being pushed out, in many cases putting computers into reboot loops and the like. It is currently my recommendation to set your updates to prompt, and to prompt that they are available, not just ready to install. Unless there is some big bug, I will generally keep my computer one month behind on updates, in an effort to keep my PC from becoming a victim of poor testing.
Moving forward into the Windows 10 world, I realize that they don't give a lot of options in the updates timing. I believe this will change, but in the meantime, a virtual machine with WSUS installed, and a group policy on all the windows PC's in your house should be sufficient to block any unwanted updates from hitting your windows 10 machines. You will need to be proactive though to approve updates every month. It's real simple, just put a reminder on your calendar. Microsoft releases new updates every month on the 2nd Tuesday. I would suggest scheduling your updates after that.