There are a few users asked about how to stop Big Sur update to go beyond 11.2.3. For those who are using my OpenCore package, and already running 11.2.3, here is the method.
Once you update the system to 11.2.3.
1) Mount the EFI partition
2) Open config.plist with a text editor
3) Search
Code:
<key>FirmwareFeatures</key>
<data>A1QM4A==</data>
<key>FirmwareFeaturesMask</key>
<data>P/8f/w==</data>
4) Remove them, save changes, and reboot.
N.B. This is not just to stop Big Sur update to go beyond 11.2.3. But completely disable the ability to install / update ANY versions of Big Sur. e.g. You can't even re-install 11.2.3 until you add these code back in. Therefore, please only do this if you know what you are doing. If you screw up your OS, and want to make a clean Big Sur installation. You will need to add these code back in by using another OS / boot drive / computer / etc.