This is all correct. Unfortunately, the way that the internet is set up, it's not possible to get control of renegade people unless they break the law (even then, not always possible).
The top result in an internet search results in the wrong Lubuntu site, leading people like you to (unwittingly) download dodgy software. It's not your fault, but unfortunately you have been landed with it.
If you have downloaded from an invalid Ubuntu website or from lubuntu[dot]net, assume that the software is compromised. Do not trust it!
In your position, I would download the correct, valid software from the official Lubuntu website, and overwrite your existing installation from scratch. I recommend the latest LTS version, which is 20.04 (the next LTS version will be 22.04).
I know that you don't what to hear this, but we aren't going to give you false information. It's for your own safety.
Also, regarding updates, you should never delay security updates. Waiting five years, even for non-security updates, is a guarantee that you'll have problems! It's also a good idea to run all the other updates when prompted.
If you open Software & Updates > Updates, you can tailor your reminders. I strongly recommend that you automatically check for updates daily, and set security updates to download and install automatically. A recent example of why that is important was a dangerous bug in Chrome, which was fixed (IIRC) overnight.
Bookmarks