Ventura docs for M2 Macs in this comment: https://gist.github.com/henrik242/65d26a7deca30bdb9828e183809690bd?permalink_comment_id=4555340#gistcomment-4555340
Old Monterey docs in this old revision: https://gist.github.com/henrik242/65d26a7deca30bdb9828e183809690bd/32c410e3a1de73539c76fa13ea5486569c4e0c5d
Solution for Sonoma: https://gist.github.com/sghiassy/a3927405cf4ffe81242f4ecb01c382ac
Please see the parent thread or earlier posts for details.
If you block gdmf.apple.com, you will likely not get public updates.
You can prevent this by not accepting profile installations going forward and leaving the three sites blocked at the PC or network level:
deviceenrollment.apple.com
iprofiles.apple.com
mdmenrollment.apple.com
If you do wipe and re-install your Mac again in the future, you can expect to need to do similar steps. Do include the extra servers for MacOS Setup.