Randy,
I could not restore either using the built in system restore. It was throwing an error on... Of course an arbitrary windows folder called WindowsApps which handles all the apps installed by default in windows like Skype and candy crush... Yay.
I had to use the media creation tool from MS and create a boot USB and repair windows from there and then use the system restore utility off the USB drive (which has italic text rather then normal text).
This system restore worked. But updates forced itself through again even with me disabling the windows update service.
I agree I hate forced updates. There need to be a method in place to allow us to stop the update. Their hide update hit fix utility did not worked for me.
The spectre and meltdown impact would be minimal to me such as you stated. My AV's are always up to date and on.