This is false. No matter what you do configuration-wise, macOS sends hardware identifiers to Apple, on each OS update (the ECID and others to the TSS server gs.apple.com), as well as when it registers for APNS. The obtained hardware-identifier-linked certs are then used continuously to access APNS.

There is no avoiding it in the first instance (the OS update process), as it is required for updates if you have boot security enabled, and there is no UI to disable APNS.