How can I ensure that macOS updates are received manually?

To get urgent security updates but not automatic updates to macOS, in System Preferences’ App Store pane check “Automatically check for updates,” and “Install system data files and security updates,” but not “Install macOS updates.”