If I'm concerned about this scenario, I'll just manually update it (by clicking the update button).
You can't advocate for people to be responsible for everything that happens on their computer and also advocate for being able to disable updates. That combination makes you a top-level felon completely at random and outside of your control. If your computer will be hacked (there is no can be hacked, only will be hacked), you'd best not be responsible. If you're responsible, it best not be hackable.
The problem is making your machine part of a botnet that will attack ME.
I don't like that.
The cost of your freedom is you being a threat to everyone around you. Do YOU take responsibility for that?
If someone takes over my computer, I'm the victim as much as you. You can't force your security standards on me, just as you can't prohibit people from connecting an arbitrary version of Windows, Linux or MacOS to the Internet just because it could inconvenience you.
Aiding and abetting might come to mind, if someone gets hurt by that gun.
Welcome to the 21st century.
What about patches that bring new features that introduce new vulnerabilities? Can I claim I didn't want the update because I was concerned about the new AI thingy introducing EVEN more security issues and turning my reasonably secure, mostly patched, computer into your "loaded gun"?