In gpedit (Configuration –> Administrative Templates –> Windows Components –> Windows Update) I have 'Configure Windows Update' set to enable and Option 7.
Despite this I woke up this morning and the computer was rebooted after update were installed overnight. I never accepted any updates. This is very frustrating as the biggest reason why I use LTSC is to avoid these unexpected reboots.