I don't know if anything changed in that area, but in the past you could disable that completely via "enterprise policy". See https://github.com/mozilla/policy-templates for a terse description. E.g. NixOS sets "DisableAppUpdate" for FF built by its build system.