You can fully control when macOS does updates of any kind with a couple of UI toggles.

Any launch daemon service will load and/or start at boot, only user-domain services require a login (like the Dock or menu bar would)