You can actually disable the auto-download-via-windows-update mechanism in windows via a gpo. Would be nice if there was a toggle in settings but it does exist at least.

Computer Configuration > Administrative Templates > System > Device Installation > Prevent automatic download of applications associated with device metadata