I’ve had auto updates turned off for years, and had been planning to stay on 13.4 for awhile. Yet this morning I woke up to a 13.7 update, and to top it off both auto download and auto update were turned on! The only thing I can think of is that yesterday morning my phone asked for my passcode to enable Touch ID, but said nothing about an update. But even if I did accidentally give it permission to update would that cause auto update to be enabled? This seems really fishy to me.