I went as far a building my own router out of an ARM box and denying all traffic going to known update servers. I’m now adding auto-detection of update-looking

I went as far a building my own router out of an ARM box and denying all traffic going to known update servers. I’m now adding auto-detection of update-looking DNS lookups and denying those too. Ironically, I’m keeping the router’s software up to date though. Security is important. But it’s linux, I can always roll back.