Windows security is no joke. UNIX-based systems have stronger intrinsic security, yet you still want to keep frequently-updated for security reasons; all the more for Windows whose security is garbage. Nonetheless, sometimes you don't want auto-update & auto-restart. Eg, I have long-running machine learning jobs spanning multiple days. To do ML on Windows, you want WSL2 which requires the dev-channel, which has your system updating every couple days. This has caused a lot of heart-ache for me, due to how aggressively Windows decides to update and restart, crashing all your running programs. And there's no setting, no matter how deep into advanced configuration you go, for disabling this feature.
There's a hack. Taken from answers.microsoft.com, you configure a setting in RegEdit.
\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
\WindowsUpdate\AU
key. There wasn't for me, so I had to create that path. Right-click "Windows" > New > Key > "WindowsUpdate" > Save. Within that, New > Key > AU