Disable prompt from applications to update
How are the devices being managed? If you’re using Android Enterprise Device Owner the end users should only see the apps in Managed Google Play that you authorize. If you’re using DA still or Work Profile then I don’t think you’re going to have the control that you’re looking at. You may need to re-enroll the devices under DO.
Apologies, the devices are Android Plus devices.