When using systemd, "systemctl mask apache2" can make sure that it's impossible for the unit to be started again (remove the mask with systemctl unmask once you've applied the patch).

I would suggest instead blocking 80 and 443 on UDP and TCP, via your firewall.

If I need to make sure apache doesn't restart I often type "syntax error" on the first line of httpd.conf