HOW YOUR MAC CAN UPDATE MACOS WHEN YOU DON'T WANT IT TO

Summary from the TLDR Web Dev newsletter

Macs can still update automatically in the background even with automatic updates disabled. A forced update can be triggered by a background activity scheduled by the DAS-CTS scheduling system, which ignores user preferences. The process can bypass authentication and offers no warning or opportunity to postpone, even conflicting with scheduled backups.