I think you could technically block updates that would appear to be major/minor updates. That level of control will have to be available for enterprise releases. I don't know what will happen with security updates though if you purposefully block some updates and allow others. It may be that some security patches will be dependent upon other system updates.