I have disabled automatic updates using group policy editor and run 'check for updates' at regular intervals.
Have been doing so for a long time. All fine.
However, whilst doing so, I wonder whether indeed totally nothing is being updated, except then for AV-stuff.

I mean : are minor updates (like build .285->.286) applied nonetheless, but the automatic updates are disabled for the major ones only, like 1803->1809 ?