Setting "app.update.auto" to false in about:config would have prevented Firefox from updating to the new release.
What I meant is that if you remove all references to `mozilla.org` you still receive updates as though they hard-coded the Mozilla URL because they really don't want people disabling updates.