I think you should better create a custom role for “administrators-non-administrators” without the update_core, update_plugins and update_themes capabilities.
I think you should better create a custom role for “administrators-non-administrators” without the update_core, update_plugins and update_themes capabilities.