So it's not such a good deal after all and it also means that a lot of regular people won't get those updates (because they either don't know how or can't be bothered to make an account).
I wonder how they detect you are in the EEA? What if you are not in the EEA, but connect to an EEA-based VPN? If you enrol while you are in EEA but then travel out of it, does the device remain enrolled?
I will even pay so my computers never ever connected MS servers! Just no idea who to pay or how technically accomplish such stunt :) And yes, I use not-a-Windows os'es everywhere, just one comp for gaming :)
Use windows build in firewall, or if you are intimidated by its bad UI install Windows Firewall Control https://www.binisoft.org/wfc.php and set Outbound connections to blocked. Then you can punch holes on a program by program basis starting with DNS/DHCP.