wuauclt.exe and wuaueng.dll. Add 'Administrators' to permissions, then go back in and delete all permission entries. Basically deny windows access to its update system. Doesn't hurt to run Anti-Beacon as well.
NSudo as Trusted Installer to cripple security center and Update medic service, group policies can shut down most of Defender and Customer Experience Improvement Program as well as the nags about those. Also have a laundry list of scheduled tasks to kill.
Takes me days to get win 10 to run as i want, be secure (from MS) and stable, aka not just suddenly change something and mess up my work.
Its still a shadow of the operating system XP was (not that XP was very good). Just compulsory auto arrange and border-less windows alone really cripples its ability to multi-task or work with complex file sets efficiently. And the amount of bloat both in its install footprint and running services is insane.