Leaving just the global setting from Google Play Store. The screenshot of Instant Apps setting shows up after the thing is already installed. Therefore this download and installation is clearly unauthorized and should not be happening. In these screenshots, you can see that all settings responsible for automatic updates are switched off. My question is: how do I completely disable unauthorized updates of an Android device, yet preserving the following functionality: So I used an app ('System Info for Android') and it shows that in fact this 'Google Play services for Instant Apps' was installed a day ago. The way I discovered it was by noticing that some functionality of my apps was changed/broken. There are no confirmations and no notifications of anything downloading, updating, or installing. (That is, most likely it is 'Google Play services' that's actually doing this in the background) When I uninstall this component, it downloads itself again and installs right back. And it is updating itself and other apps/components without permission. It broke functionality of my firewall (AFWall and couple of other apps). ' Google Play services for Instant Apps' has installed itself onto my device without my permission.