Microsoft Admits It Updated Some Windows 10 Computers To Newest Build Despite Users Telling It Not To Do That (bleepingcomputer.com)
Catalin Cimpanu, writing for BleepingComputer: The admission came in a knowledge base article updated last week. Not all users of older Windows versions were forcibly updated, but only those whose machines were running Windows 10 v1703 (Creators Update). This is the version where Microsoft added special controls to the Windows Update setting section that allow users to pause OS updates in case they have driver or other hardware issues with the latest OS version. But according to reports, a Microsoft snafu ignored these settings and forcibly updated some users to Windows 10 v1709 (Fall Creators Update).
If you have thousands of computers you then just use Windows Server Update Services (WSUS) and you control if, when and which updates install... You don't even need a domain for that.
On computers with diagnostics reporting disabled, Windows uses Update Assistant to force the upgrade even with Windows Update disabled.
Microsoft has lost almost all trust from its users.