Windows hosts file can't block IPs. Only domains. Firewall rule is needed.
Why disable updates? I prefere to use older and familiar versions of any software and update everything manually (controlled) - in case if it is not a security update. Mybe this policy is not perfect, but this is my choice. Usually any software has option how often to check for updates, and one of the options is "never". I would like to have the same function for SAB.