I think the key is actually to disable the macOS Services rule group. They seem to exempt apple.com connections by default, probably so that new users aren't overwhelmed with connection dialogs, but in this case you want to stop the Mac from phoning home.
The aptly name softwareupdated process performs software updates.
Comments
See also https://tidbits.com/2024/01/22/ventura-and-monterey-users-be...
By the way, I highly recommend Little Snitch, which can block these downloads: https://www.obdev.at/products/littlesnitch/
I personally do all of my macOS updates manually using the command-line softwareupdate tool in Terminal app.
That Tidbits article was useful. Thanks for that.
I use Little Snitch, but what rules are to be set to block these downloads?
I think the key is actually to disable the macOS Services rule group. They seem to exempt apple.com connections by default, probably so that new users aren't overwhelmed with connection dialogs, but in this case you want to stop the Mac from phoning home.
The aptly name softwareupdated process performs software updates.