With partial countermeasures, like disabling the Windows Update service, several other services (Windows Update Medic (WaasMedic) and Update Orchestrator (usosvc)) and scheduled tasks will do a variety of things silently to make WU active again. It may try to update at strange times after making those repairs. Sometimes, it grabs new firmware for OEM laptops and installs that during the reboot. That's not comforting in the slightest.
If you delete all the associated scheduled tasks and manually disable all of those services, you can get a few months, maybe a year or five of uptime.