I am afraid you do not completely understand how these settings work. Never is the only setting that will give you control. In my original post, I explained this. You can test it for yourself to see it.
If you choose “check for updates, but let me choose whether to download and install them”, Microsoft will download “important” updates like KB3035583 to your computer. It will be pre-checked — selected. Unless you check Windows Update (WU) and discover this BEFORE you shut down, it will install it during the shut-down process.
So, inspite of your strong recommendation, I would insist on the Never setting.
Never does not mean you will never check for updates. I strongly recommend you do this once a month sometime shortly after the 2nd Tuesday. Never means Microsoft is never allowed control and only you have that control.
I have ALWAYS had my settings set for never checking, as I have ALWAYS done this manually.
Should not make a lick of difference f it's set to check for them but let me decide.