just do factory reset and immediately put it into flight mode. It can't update if it has no wifi password. If you want to update, just do it via cable.

I have couple kindle paperwhites of different generations, and none of them did any unexpected update for years.