On the other hand, Firefox does respect locked preferences after update. Debian sets both app.update.enabled and toolkit.telemetry.enabled locked to false.