So I have blocked my mother's PC updating from Windows 8 to 10 because it broke everything for her - so I rolled it back. Have prevented the upgrade auto-occurring again by specifying we are on a "metered" connection, which seems to be the standard trick to prevent the upgrade to 10.
Any idea if this also prevents security updates?