I would take issue with setting Windows Update to Never check - much better to set it to "check but allow me to choose", or whatever the wording is
I agree, but note my observation earlier that at least one GWX related update (and possibly more) will KEEP REAPPEARING, regardless of being marked as "hidden". Hence the need to go through the Patch Tuesday list, highlight each one in turn, and click the "More Information" link on the right. Any that suggest "Telemetry", "Upgrade" or "Improved User Experience" should be unticked, and then right click and "Hide".
TFP