You have to set the following undocumented and misleadingly named env vars to disable this:
"MM_LOGSETTINGS_ENABLEDIAGNOSTICS": "false",
"MM_SERVICESETTINGS_ENABLESECURITYFIXALERT": "false",
I'm a belt and suspenders guy so I also patch the binary: "FROM mattermost/mattermost-team-edition@$$cap_mattermost_version",
"RUN sed -i 's#api.segment.io#xx.example.com#gI' /mattermost/bin/mattermost",
"RUN sed -i 's#securityupdatecheck.mattermost.com#xxxxxxxxxxxxxxxxxxxxxx.example.com#gI' /mattermost/bin/mattermost"