Since a full installation of Windows is less than 4 GB, it's strange that an update would be 10 GB. Moreover, as long as it's downloading, it isn't updating. Just downloading the data to start updating when it has all.

All you can do: define your connection as "metered". Then only the security fixes will be updated.