I was always under the impression that managed Apple TVs required a MDM remote command to initiate a tvOS update but I recently noticed most of my fleet has automatically updated to tvOS 17 on their own. 

Is there a way to prevent this as this causes disruptions in the classroom?