This has been brought up several times in the past but never a solution except at a firewall level which means our users will be able to download the updates from another network. IOS 10 just around the corner we're wanting to block it until we're happy there's no major issues.
I guess this functionality is still not available in MDMs yet?
