I am a professional software developer. I have had Firefox updates disabled for years. I run uBlock Origin with a custom JavaScript whitelist, and it works wonderfully. The only issue I have is when someone is using some bleeding edge web API. in 9 years, I have NEVER had a security issue due to disabled updates.
Stop the scare tactics.