You can easily turn off “Auto Updates” - Although I can’t think of any scenario where you wouldn’t want the latest update?
You are talking about the iPhone OS (rather than the app specific updates) - You are right, in part it is to patch any security vulnerabilities - Although the whole “Jailbreaking” scene is kinda dead these days.