You cant stop some updates unless you disable Google services as well as the manufacturer updates (then replace it with something else so your other apps work). That needs root and usually an unlocked bootloader. A long, deep rabbit hole; nearly impossible if you aren't a techie. Can be done though, yay AOSP!

TLDR: not updating wont save you. You need a hardened OS.